We have a 51-Node Index Cluster where we do not replicate Index bucket copies. We only have a primary copy of the buckets (so actually no "copy", just a single instance of each bucket on a single Indexer), and we use the CM/IDX Cluster for it's management capabilities. Our repfactor=1.
Will data rebalancing, for the sole purpose of getting those single primary buckets that are amassed on earlier built Indexers moved between newer built Indexers, work to average out storage across the Cluster?
I've heard from PS that it will, but have heard from other Splunk Admins that it will only work with "copies" of bucket data, and since we don't have "copies", but single instances of primary buckets, it will not work.
We are not yet using SmartStore. We have over 600TB of storage between hot/warm/cold. All of it is through GCP and is attached/mounted to the VMs. We would probably want to do a searchable-rebalance if it would even work on our cluster.
Thanks in advance!!
