Deployment Architecture
Highlighted

Multisite Indexer Clustering: Can a Site be decommissioned after it has been Operational? What will be the impact?

Splunk Employee
Splunk Employee

Current Environment has an Indexer Clustering Multisite setup with Site 1 and Site 2. We plan to decommission site 2 and wanted to know the impact on Indexer Clustering.

0 Karma
Highlighted

Re: Multisite Indexer Clustering: Can a Site be decommissioned after it has been Operational? What will be the impact?

Splunk Employee
Splunk Employee

Please note currently multi-site buckets are bonded (has persistent binding) to Originating Site.

As a result once site is created it cannot be decommissioned or else the buckets Originating from that site will never meet the Search and Replication Factor.

Splunk has pending Enhancement Bug requesting that bonding should be broken and it should be more flexible to copy/move bucket between sites. For your reference enhancement Request is --SPL-110192:Multi-site buckets should not be bonded to Originating Site.

View solution in original post