Deployment Architecture

Why is Site Affinity not working with my current server.conf configuration on my search heads?

lycollicott
Motivator

I have this in server.conf on my search heads:

[general]
pass4SymmKey = $$$$$$$$$$$$$$$$$
serverName = xxx-xxxxxxxx
site = site1

[clustering]
master_uri = https://xx.xx.xx.xx:8089
mode = searchhead
multisite = true
pass4SymmKey = $$$$$$$$$$$$$$$$$

But my search results come from the splunk_server at sites1 and site2. Any idea why?

0 Karma
1 Solution

lycollicott
Motivator

Site affinity was actually working. The other site's splunk_server was only returning results for buckets which had not replicated.

Duh. Yes, I felt like an idiot.

View solution in original post

lycollicott
Motivator

Site affinity was actually working. The other site's splunk_server was only returning results for buckets which had not replicated.

Duh. Yes, I felt like an idiot.

s2_splunk
Splunk Employee
Splunk Employee

Is your cluster in site1 valid and complete, i.e. search and replication factors met and all peers up?

lycollicott
Motivator

Yes, it is valid and complete.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...