Deployment Architecture

What are the impacts of the cluster master being down for some period?

jaracan
Communicator

Hi ream,

We would like to know what would be the impact on the Indexer Clustering tier if our Cluster Master (AWS EC2) will be down for some period of time. The reason is that there will be some AWS maintenance activity for the Cluster Master Splunk server instance (AWS EC2).

Can you share with us, what would be the impact on peer nodes, or on the Indexer Clustering tier as a whole? Or what should be our action maybe?

0 Karma
1 Solution

dkeck
Influencer
0 Karma

nikita_p
Contributor

HI,
The master is essential to the proper running of an indexer cluster, with its role as coordinator for much of the cluster activity. However, if the master goes down, the peers and search head have default behaviors that allow them to function fairly normally, at least for a while. Nevertheless, you should treat a downed master as a serious failure.

To deal with the possibility of a downed master, you can configure a stand-by master that can take over if needed. You can go through the link below of Splunk docs for how to do this:
https://docs.splunk.com/Documentation/Splunk/7.2.4/Indexer/Whathappenswhenamasternodegoesdown

0 Karma

dkeck
Influencer
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.