Deployment Architecture

What does CMTruncJob mean in indexer clustering?

rbal_splunk
Splunk Employee
Splunk Employee

Anyone can point me to docs that describe under what circumstances the cluster master will issue bucket truncation jobs (CMTruncJob)

Tags (1)
0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

1) remove excess buckets (cmtruncjob with size=0 is the same as remove a bucket)
2) mismatch size of a bucket - generally after rolling restart / shutdown of a peer where the streaming connection of a hot buckett isnt consistent across the indexers - in which case we truncate to the smallest size of a bucket. we truncate to the smallest size because we dont ACK back to the forwarder until ALL copies of a hot bucket get a slice, so the assumption is that the the smallest size of the bucket has all the ACK'd slices (whereas the larger bucket has a piece that hasnt been ACKd)

Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!