What are best practices for shutting down an indexer cluster before moving this environment to a different location?

[abyjoy]

Hi

I have a splunk cluster with
1. One master
2. Two Peers
3. One search head

I wanted to move this environment to a different location, so I need a proper shut down process. Any body have any idea what will be the best practice for shutting down a cluster like this? And what will be the order of the shutdown?

[harsmarvania57]

Hi abyjoy,

Order for shutting down whole splunk environment which running cluster is as follows, I had followed same steps many times

1.) Search heads
2.) Indexers
3.) Cluster Master

When you want to start it again it will be in reverse order.

Starting order
1.) Cluster Master
2.) Indexers
3.) Search Heads

Thanks,
Harshil