Deployment Architecture
Highlighted

Why is Site Affinity not working with my current server.conf configuration on my search heads?

Motivator

I have this in server.conf on my search heads:

[general]
pass4SymmKey = $$$$$$$$$$$$$$$$$
serverName = xxx-xxxxxxxx
site = site1

[clustering]
master_uri = https://xx.xx.xx.xx:8089
mode = searchhead
multisite = true
pass4SymmKey = $$$$$$$$$$$$$$$$$

But my search results come from the splunk_server at sites1 and site2. Any idea why?

0 Karma
Highlighted

Re: Why is Site Affinity not working with my current server.conf configuration on my search heads?

Splunk Employee
Splunk Employee

Is your cluster in site1 valid and complete, i.e. search and replication factors met and all peers up?

Highlighted

Re: Why is Site Affinity not working with my current server.conf configuration on my search heads?

Motivator

Yes, it is valid and complete.

0 Karma
Highlighted

Re: Why is Site Affinity not working with my current server.conf configuration on my search heads?

Motivator

Site affinity was actually working. The other site's splunk_server was only returning results for buckets which had not replicated.

Duh. Yes, I felt like an idiot.

View solution in original post