Deployment Architecture
Highlighted

Summary Indexes on Search Head Cluster and its affect on Indexing Volume

Path Finder

Hi,

We have 3 search heads with a search head deployer that work with 3 indexer and index master. We have a license manager which talks to all the nodes regarding license usage. We have a use case for summary indexes to avoid recalculation of old data.

When we deploy scheduled searches on the Search Heads,

  1. Only one search is running in all the search heads put together.
  2. In order to keep the information in sync, we are going to forward the summary indexes to Index cluster.

When summary index data gets forwarded to indexers, will the data volume be counted by the license master?

regards
Pramodh

0 Karma
Highlighted

Re: Summary Indexes on Search Head Cluster and its affect on Indexing Volume

SplunkTrust
SplunkTrust

Hi @ykpramodhcbt,

No, data which goes to summary index will not count by license master, so feel free to use summary indexes.

View solution in original post

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.