Deployment Architecture

Replication factor change before indexer removing

michael_vi
Path Finder

Hi,

We have 3 indexers and 1 search head (replication factor = 3).I need to permanently remove one indexer 

What is the correct procedure:

1. Change replication factor = 2 and then remove indexer

OR

1. Remove indexer and after that change the replication factor to 2

 

Thanks

Labels (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Reduce the replication factor (and search factor if it's also 3) before removing the indexer.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Reduce the replication factor (and search factor if it's also 3) before removing the indexer.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

If you want to gain full control over your growing data volumes, check out Splunk’s Data Management pipeline ...

Out of the Box to Up And Running - Streamlined Observability for Your Cloud ...

  Tech Talk Streamlined Observability for Your Cloud Environment Register    Out of the Box to Up And Running ...

Splunk Smartness with Brandon Sternfield | Episode 3

Hello and welcome to another episode of "Splunk Smartness," the interview series where we explore the power of ...