Deployment Architecture

What is origin when setting a Multisite Indexer Cluster?

ddrillic
Ultra Champion

What is origin? I just don't understand what it means...

As in the command -

~/cmaster/bin/splunk edit cluster-config -mode master -multisite true 
-site site1 -available_sites site1,site2 -site_replication_factor origin:1,total:2 -site_search_factor origin:1,total:2 -replication_factor 1 -search_factor 1 -secret xxxx
Tags (2)
0 Karma
1 Solution

somesoni2
SplunkTrust
SplunkTrust

The 'origin' refers to the site which contains the original raw data (bucket). The term -site_replication_factor origin:1,total:2 means that there will be 1 copy of raw data bucket in the site where data was originated (indexed) (1 copy means just the original copy) and there will be a total of 2 copied of that data available in the cluster (so since origin site has 1, other 1 copy (2-1=1) will be replicated to other site(s)).

View solution in original post

somesoni2
SplunkTrust
SplunkTrust

The 'origin' refers to the site which contains the original raw data (bucket). The term -site_replication_factor origin:1,total:2 means that there will be 1 copy of raw data bucket in the site where data was originated (indexed) (1 copy means just the original copy) and there will be a total of 2 copied of that data available in the cluster (so since origin site has 1, other 1 copy (2-1=1) will be replicated to other site(s)).

ddrillic
Ultra Champion

Crystal clear as always - thank you @somesoni2 !!!

0 Karma

ddrillic
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...