Is KVStore supported in search head clustering?

[cparid]

I am trying to build a dashboard based on certain time series data for monthly and yearly trends. We have been using CSV inputlookup for that, but came to know they are not for storage. So was wondering if KVStore will be a better choice and if thats being supported in clustered search heads.

[masonmorales]

Yes, it will work in a clustered search head environment. Per the docs:

"In a search head cluster, if any node receives a write, the KV store delegates the write to the KV store captain. The KV store keeps the reads local, however."

Also, v6.3 allows you to distribute the Key Value Store across indexers instead of storing its data on the search head. You might want to look into that as well: http://docs.splunk.com/Documentation/Splunk/6.3.0/Admin/AboutKVstore