We are designing Splunk architecture for our organization. we would like to maintain copy of data at other data centre for disaster recovery. What could be the procedure to maintain Splunk deployment at two data centers? How is license charged?
Take a look into multi-site index clustering. You should be able to set it up so that your data will replicate in both locations, this will not incur any extra charges as it will only matter what data is indexed, not how much is replicated.
Take a look into multi-site index clustering. You should be able to set it up so that your data will replicate in both locations, this will not incur any extra charges as it will only matter what data is indexed, not how much is replicated.