Deployment Architecture

Multisite Indexer Clustering: Can a Site be decommissioned after it has been Operational? What will be the impact?

rbal_splunk
Splunk Employee
Splunk Employee

Current Environment has an Indexer Clustering Multisite setup with Site 1 and Site 2. We plan to decommission site 2 and wanted to know the impact on Indexer Clustering.

0 Karma
1 Solution

rbal_splunk
Splunk Employee
Splunk Employee

Please note currently multi-site buckets are bonded (has persistent binding) to Originating Site.

As a result once site is created it cannot be decommissioned or else the buckets Originating from that site will never meet the Search and Replication Factor.

Splunk has pending Enhancement Bug requesting that bonding should be broken and it should be more flexible to copy/move bucket between sites. For your reference enhancement Request is --SPL-110192:Multi-site buckets should not be bonded to Originating Site.

View solution in original post

rbal_splunk
Splunk Employee
Splunk Employee

Please note currently multi-site buckets are bonded (has persistent binding) to Originating Site.

As a result once site is created it cannot be decommissioned or else the buckets Originating from that site will never meet the Search and Replication Factor.

Splunk has pending Enhancement Bug requesting that bonding should be broken and it should be more flexible to copy/move bucket between sites. For your reference enhancement Request is --SPL-110192:Multi-site buckets should not be bonded to Originating Site.

Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...