Deployment Architecture

What type of restart happens during a normal indexer cluster rolling restart?


When an indexer is restarted during a normal rolling restart, does it shutdown via the `offline` method? Or does it do a normal shutdown process?

The documentation indicates that during a "searchable" rolling restart, each peer is actually offlined and not simply shut down. But for a normal rolling restart, how does the indexer shutdown?

How does this work from the cluster masters perspective? I've been unable to find rest calls against the restart or offline endpoints during a rolling restart, but maybe the CM isn't actually making those calls (or they aren't being logged for some reason)?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...