Deployment Architecture

colddb on NFS

harald_leitl
Path Finder

Hi,

Is it possible that multiple indexers (same index) use the same shared NFS directory for colddb?

For example:

indexer1:
indexes.conf
[indexA]
...
coldPath = /NFS/indexA/colddb
...

indexer2:
[indexA]
...
coldPath = /NFS/indexA/colddb
...

OR should it look like:

indexer1:
indexes.conf
[indexA]
...
coldPath = /NFS/indexer1/indexA/colddb
...

indexer2:
[indexA]
...
coldPath = /NFS/indexer2/indexA/colddb
...

thx

0 Karma
1 Solution

jodros
Builder

We are currently running a setup that is similar to the second option, where each indexer has it's own directory on the NFS share. It is working fine.

View solution in original post

jodros
Builder

We are currently running a setup that is similar to the second option, where each indexer has it's own directory on the NFS share. It is working fine.

martin_mueller
SplunkTrust
SplunkTrust

The first variant could in theory produce name clashes if both indexers start the same bucket number at the same time and stop it at the same time as well, the name would then be db_endtime_starttime_number for both and you'd end up overwriting each other.

The second variant should work, along with the usual caveats of decreased performance.

Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...