Why are events in my indexer cluster not the same even though the index has repFactor = auto?

[felipesewaybric]

Hey guys,

i have 1 search head, 2 peers, and 1 master. On replication Factor 2.

my index has repFactor=auto, but i noticed that the events are not exactly the same:

Anyone knows how to resolve this?

Splunk 6.5.0

Thanks

[starcher]

Index clustering does not ensure equal event counts from all indexers to a search. It ensures copies across the indexers in the event of a loss of an indexer. You get results from the primary buckets across indexers at the time. In your screen shot I imagine you have more active primary buckets on the one returning more results for that value of splunk_server.