What happens when a cluster master goes down?

[Steve_G_]

If the master goes down, what happens to incoming data? Does it continue to get replicated? How about if a bucket rolls? Can a new bucket get replicated?

What about searches? Can the search head continue to coordinate searches and will the search results be complete?

[star_lord]

Updated link:

https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Whathappenswhenamanagernodegoesdown

[Steve_G_ · Accepted solution]

The answers to these, and many other, questions related to master failure can be found here:

http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Whathappenswhenamasternodegoesdown

[hemendralodhi]

I have a question around this: As per docs SH query Master to get list of peers and direct request to them. In case of Master failure how search will continue??

[svarathan_splun]

The initial question is related to Index clustering. You are asking about SH Clustering.

With SH Clustering - the SH Cluster will elect a new "Captain" and that new Captain will take the role of getting the list of peers and directing requests.