Deployment Architecture

What happens when a cluster master goes down?

Steve_G_
Splunk Employee
Splunk Employee

If the master goes down, what happens to incoming data? Does it continue to get replicated? How about if a bucket rolls? Can a new bucket get replicated?

What about searches? Can the search head continue to coordinate searches and will the search results be complete?

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

The answers to these, and many other, questions related to master failure can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Whathappenswhenamasternodegoesdown

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

The answers to these, and many other, questions related to master failure can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Whathappenswhenamasternodegoesdown

View solution in original post

hemendralodhi
Contributor

I have a question around this: As per docs SH query Master to get list of peers and direct request to them. In case of Master failure how search will continue??

0 Karma

svarathan_splun
Splunk Employee
Splunk Employee

The initial question is related to Index clustering. You are asking about SH Clustering.

With SH Clustering - the SH Cluster will elect a new "Captain" and that new Captain will take the role of getting the list of peers and directing requests.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!