Hey guys,
i have 1 search head, 2 peers, and 1 master. On replication Factor 2.
my index has repFactor=auto
, but i noticed that the events are not exactly the same:
Anyone knows how to resolve this?
Splunk 6.5.0
Thanks
Index clustering does not ensure equal event counts from all indexers to a search. It ensures copies across the indexers in the event of a loss of an indexer. You get results from the primary buckets across indexers at the time. In your screen shot I imagine you have more active primary buckets on the one returning more results for that value of splunk_server.