Deployment Architecture

What type of restart happens during a normal indexer cluster rolling restart?

muebel
SplunkTrust
SplunkTrust

When an indexer is restarted during a normal rolling restart, does it shutdown via the `offline` method? Or does it do a normal shutdown process?

The documentation indicates that during a "searchable" rolling restart, each peer is actually offlined and not simply shut down. But for a normal rolling restart, how does the indexer shutdown?

How does this work from the cluster masters perspective? I've been unable to find rest calls against the restart or offline endpoints during a rolling restart, but maybe the CM isn't actually making those calls (or they aren't being logged for some reason)?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...