Deployment Architecture

multisite RF & SF are not correctly representing in master UI

mchang_splunk
Splunk Employee
Splunk Employee

I setup one multisite with the following server.conf

[clustering]
available_sites = site1,site2,site3
mode = master
multisite = true
site_replication_factor = origin:2,site1:2,site2:2,site3:2,total:6
site_search_factor = origin:2,site1:2,site2:2,site3:2,total:6

However, in master UI, I still see RF=3, and SF=2, which is the default value of singlesite.
alt text

Is this a bug?

0 Karma
1 Solution

mchang_splunk
Splunk Employee
Splunk Employee

This is a known issue SPL-87142 which is only on multisite clustering.
If you're on single site, it's working well.

View solution in original post

0 Karma

mchang_splunk
Splunk Employee
Splunk Employee

This is a known issue SPL-87142 which is only on multisite clustering.
If you're on single site, it's working well.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...