Deployment Architecture
Highlighted

What are the impacts of the cluster master being down for some period?

Communicator

Hi ream,

We would like to know what would be the impact on the Indexer Clustering tier if our Cluster Master (AWS EC2) will be down for some period of time. The reason is that there will be some AWS maintenance activity for the Cluster Master Splunk server instance (AWS EC2).

Can you share with us, what would be the impact on peer nodes, or on the Indexer Clustering tier as a whole? Or what should be our action maybe?

0 Karma
Highlighted

Re: What are the impacts of the cluster master being down for some period?

Influencer
0 Karma
Highlighted

Re: What are the impacts of the cluster master being down for some period?

Contributor

HI,
The master is essential to the proper running of an indexer cluster, with its role as coordinator for much of the cluster activity. However, if the master goes down, the peers and search head have default behaviors that allow them to function fairly normally, at least for a while. Nevertheless, you should treat a downed master as a serious failure.

To deal with the possibility of a downed master, you can configure a stand-by master that can take over if needed. You can go through the link below of Splunk docs for how to do this:
https://docs.splunk.com/Documentation/Splunk/7.2.4/Indexer/Whathappenswhenamasternodegoesdown

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.