Deployment Architecture

Splunk Search Factor and Replication Factor never met

kumar493
Path Finder

Hello ,

I am having an issue in splunk , My buckets never fixed up and the SF and RF were never met ,

I have 3 indexers with a CM  in Cluster and 3 search heads in cluster and 6 indexer with a CM in One cluster , Both of the 6 indexer and 3 indexer cluster are integrated to one SHC.  , I set 2 SF and 2 RF for this insatnce , But when i check on one of the bucket , Its saying Replication count by site , default 1 and search count by site default 1 and origin site showing default , I am not sure i set 2 SF and RF dont know why its showing as 1 .

 

kumar493_0-1605281531829.png

@somesoni2 @woodcock 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...