Deployment Architecture

What is the difference between using repFactor=0 versus repFactor=1?

goodsellt
Contributor

Can anyone explain to me the differences between using repFactor=0 and repFactor=1?

We only replicate specific critical indexes in our environment (in an interest of conserving disk space). However, by not having repFactor set (so it defaults to 0), those indexes do not appear in the list of indexes in the indexer clustering UI and are not eligible for things like data rebalancing. So going back to my original question, would we get the ability to monitor the status and rebalance the data for these non replicated indexes if we set repFactor to 1 or is this just intended behavior of Splunk currently?

0 Karma
1 Solution

Steve_G_
Splunk Employee
Splunk Employee

The repFactor setting has one function only: It determines whether an index gets replicated across the cluster. All clustered indexes must include the setting repFactor=auto, and this setting must be configured identically on all the peer nodes. As with other index-related settings, the way to do this is to distribute the updated indexes.conf file via the configuration bundle methd.

For details, see http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Configurethepeerindexes#The_indexes.conf_r...

Note: The indexes.conf.spec file implies that repFactor can be set to multiple values. At this time, the only valid values for repFactor are 0 and auto.

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

The repFactor setting has one function only: It determines whether an index gets replicated across the cluster. All clustered indexes must include the setting repFactor=auto, and this setting must be configured identically on all the peer nodes. As with other index-related settings, the way to do this is to distribute the updated indexes.conf file via the configuration bundle methd.

For details, see http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Configurethepeerindexes#The_indexes.conf_r...

Note: The indexes.conf.spec file implies that repFactor can be set to multiple values. At this time, the only valid values for repFactor are 0 and auto.

goodsellt
Contributor

Thanks for the clarification on this! Yes I was looking at the spec file primarily and that's where I started getting a bit confused by the description of the attribute.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...