Deployment Architecture

distsearch.conf can you link replicationBlacklist and dmc_group (peer groups)

jonxilinx
Explorer

in the distsearch.conf on our search head we can blacklist applications

 

[replicationBlacklist]
splunk_app1_blacklist = apps/splunk_app1/...

splunk_app2_blacklist = apps/splunk_app2/...

We can also define groups of search peers (here we have peers in two groups)

[distributedSearch:dmc_group_main]
servers = 172.21.72.127:8089,172.21.72.128:8089
default = true

[distributedSearch:dmc_group_satelite]
servers = 10.1.1.1:8089,10.1.1.2:8089
default = true

 

If we dont have indexes for app1 and app2 on peers dmc_group_satelite,

can the [replicationBlacklist] be written in a way  so that its not pushing the peerbundles to it

ONLY want  to push bundles to group_main

(no need to have a knowledge bundle on peers that dont have searchable index)

Many thanks, Jon

 

Labels (1)
0 Karma