- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

lycollicott
Motivator
02-09-2016
11:55 AM
I have this in server.conf on my search heads:
[general]
pass4SymmKey = $$$$$$$$$$$$$$$$$
serverName = xxx-xxxxxxxx
site = site1
[clustering]
master_uri = https://xx.xx.xx.xx:8089
mode = searchhead
multisite = true
pass4SymmKey = $$$$$$$$$$$$$$$$$
But my search results come from the splunk_server at sites1 and site2. Any idea why?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

lycollicott
Motivator
02-22-2016
07:23 AM
Site affinity was actually working. The other site's splunk_server was only returning results for buckets which had not replicated.
Duh. Yes, I felt like an idiot.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

lycollicott
Motivator
02-22-2016
07:23 AM
Site affinity was actually working. The other site's splunk_server was only returning results for buckets which had not replicated.
Duh. Yes, I felt like an idiot.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
s2_splunk

Splunk Employee
02-09-2016
02:18 PM
Is your cluster in site1 valid and complete, i.e. search and replication factors met and all peers up?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

lycollicott
Motivator
02-10-2016
04:28 AM
Yes, it is valid and complete.
