Deployment Architecture

Is it possible in an indexer cluster to apply a different replication factor to cold buckets only?

mhassan
Path Finder

Does any one know of a mechanism to apply a different replication factor to cold buckets only? I know R factor applies to all buckets, but I need to know if we can break hot/warm to be different than cold?

0 Karma
1 Solution

lguinn2
Legend

There is no way to do that. The replication factor (and search factor) apply to all buckets in an index that is being replicated.

View solution in original post

somesoni2
Revered Legend

Just out of curiosity, what were you planning to set the retention periods (for hot/warm and cold)?

0 Karma

lguinn2
Legend

There is no way to do that. The replication factor (and search factor) apply to all buckets in an index that is being replicated.

mhassan
Path Finder

Thank you for confirming that!

0 Karma

ppablo
Retired

Hi @mhassan

Glad you got your question answered 🙂 Can you resolve the post by clicking "Accept" directly below @lguinn_splunk's answer please? Be sure to do this with all of your questions with a working answer. Thanks!

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...