Deployment Architecture

Replication Fector and Search Artifact

bhavin_crest
Explorer

Can some one pleace explain me the replation between Replication Fector and Search Artifact.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Replication Factor refers to the number of copies of a "thing" Splunk will maintain. In indexer clusters, the "thing" is a bucket. In search head clusters, the "thing" is a search artifact.
A search artifact is what is produced by a search. It is the results of the search plus any other item such as a lookup file.

---
If this reply helps you, an upvote would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Replication Factor refers to the number of copies of a "thing" Splunk will maintain. In indexer clusters, the "thing" is a bucket. In search head clusters, the "thing" is a search artifact.
A search artifact is what is produced by a search. It is the results of the search plus any other item such as a lookup file.

---
If this reply helps you, an upvote would be appreciated.
0 Karma

bhavin_crest
Explorer

@richgalloway value of replication factor and search artifacts should be same or it can have different values.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

There is no value for search artifacts. Perhaps you mean "Search Factor"? If so, Search Factor is the number of searchable copies of a bucket an indexer cluster will maintain. Search Factor can be different from Replication Factor, but cannot be greater than it.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...