Deployment Architecture

Splunk replication factor and search factor modifications

Contributor

If I increase my replication factor or the search factor. Does this changes are applicable to old buckets?

suppose I increase search factor from 1 to 2.
Does searchable copies for old buckets prior to current time will also increase to 2?

Similarly,
suppose I increase repliactionfactor from 1 to 2.
Does replicatedcopies for old buckets prior to current time will also increase to 2?

0 Karma

SplunkTrust
SplunkTrust

yes,
read answer here:
https://answers.splunk.com/answers/401010/is-it-possible-to-increase-the-replication-and-sea.html
used it in the past. prepare for disk usage increase.
~15% for RF and ~35% for SF of the size of the data you have.
so if you have 100GB on disk (indexes) with RF=1 and SF=1 if you increase to RF=2 anticipate 15GB growth on disk
hope it helps

0 Karma