Multisite Indexer Clustering: Can a Site be decommissioned after it has been Operational? What will be the impact?

[rbal_splunk]

Current Environment has an Indexer Clustering Multisite setup with Site 1 and Site 2. We plan to decommission site 2 and wanted to know the impact on Indexer Clustering.

[rbal_splunk · Accepted solution]

Please note currently multi-site buckets are bonded (has persistent binding) to Originating Site.

As a result once site is created it cannot be decommissioned or else the buckets Originating from that site will never meet the Search and Replication Factor.

Splunk has pending Enhancement Bug requesting that bonding should be broken and it should be more flexible to copy/move bucket between sites. For your reference enhancement Request is --SPL-110192:Multi-site buckets should not be bonded to Originating Site.