If the master goes down, what happens to incoming data? Does it continue to get replicated? How about if a bucket rolls? Can a new bucket get replicated?
What about searches? Can the search head continue to coordinate searches and will the search results be complete?
The answers to these, and many other, questions related to master failure can be found here:
http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Whathappenswhenamasternodegoesdown
The answers to these, and many other, questions related to master failure can be found here:
http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Whathappenswhenamasternodegoesdown
I have a question around this: As per docs SH query Master to get list of peers and direct request to them. In case of Master failure how search will continue??
The initial question is related to Index clustering. You are asking about SH Clustering.
With SH Clustering - the SH Cluster will elect a new "Captain" and that new Captain will take the role of getting the list of peers and directing requests.