Deployment Architecture

distsearch.conf can you link replicationBlacklist and dmc_group (peer groups)

jonxilinx
Explorer

in the distsearch.conf on our search head we can blacklist applications

 

[replicationBlacklist]
splunk_app1_blacklist = apps/splunk_app1/...

splunk_app2_blacklist = apps/splunk_app2/...

We can also define groups of search peers (here we have peers in two groups)

[distributedSearch:dmc_group_main]
servers = 172.21.72.127:8089,172.21.72.128:8089
default = true

[distributedSearch:dmc_group_satelite]
servers = 10.1.1.1:8089,10.1.1.2:8089
default = true

 

If we dont have indexes for app1 and app2 on peers dmc_group_satelite,

can the [replicationBlacklist] be written in a way  so that its not pushing the peerbundles to it

ONLY want  to push bundles to group_main

(no need to have a knowledge bundle on peers that dont have searchable index)

Many thanks, Jon

 

Labels (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.