Deployment Architecture

Will buckets created in a single indexer cluster be replicated across multiple sites when migrated to a multisite cluster?

Splunk Employee
Splunk Employee

Will buckets created in single cluster be replicated across multi-sites when it is migrated to multi-site cluster?
I briefly tested it which appears not being replicated. Can anyone confirm if it’s the case?

0 Karma

SplunkTrust
SplunkTrust

Splunk server.conf in version 7.2:

constrain_singlesite_buckets = <boolean>
* Only valid for mode=master and is only used if multisite is true.
* Specifies whether the cluster keeps single-site buckets within one site
  in multisite clustering.
* When this setting is "true", buckets in a single site cluster do not
  replicate outside of their site. The buckets follow 'replication_factor'
  'search factor' policies rather than 'site_replication_factor'
  'site_search_factor' policies. This is to mimic the behavior of
  single-site clustering.
* When this setting is "false", buckets in non-multisite clusters can
  replicate across sites, and must meet the specified
  'site_replication_factor' and 'site_search_factor' policies.
* Default: true

Support has been added apparently...

Splunk Employee
Splunk Employee

Currently we do not have this capability.

In the upcoming major release this capability may be added .

0 Karma

Splunk Employee
Splunk Employee

That is not the case today.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!