Deployment Architecture

Indexers cluster: Data synchronization after failure

noybin
Communicator

Hello,

I am creating an indexer cluster (2 peers and replication factor=2) and I need to know:

  1. If one of the peers is down, the other one keep receiving events (from the sources or HF) and responding searches to the Search Head right?

  2. When the peer is up again, does it receive the events generated during the time it was down? Or they will only reside in the peer that was up all the time?

  3. Do we need to backup both indexers although they have the same data?

Thank you very much.

0 Karma

noybin
Communicator

Thank you very much.

I've been reading what you sent me and I think that the answers are:

  1. YES
  2. YES
  3. ?

Is that correct?

Thank's again.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...