Getting Data In

Migrating my current indexer cluster to a multisite cluster, if I add two new indexers, will old data be replicated?



I have cluster with two indexers (A,B), and a lot of indexed data.
I want to add two new indexers (C,D), and decided to do a multisite clustering: site1- A,B ; site2 - C,D.

I want to set replication and search factors to 3: origin 2, all 1 and wonder if old indexed data (on A and B) would be replicated to site2?

0 Karma

Splunk Employee
Splunk Employee

No they won't be. They'll behave like single-site buckets - and only replicate within the site that they were created (A,B), and follow the old single-site replication_factor search_factor policies. (Your new buckets will follow the new multi-site configuration). See

0 Karma
Get Updates on the Splunk Community!

New Splunk Observability innovations: Deeper visibility and smarter alerting to ...

You asked, we delivered. Splunk Observability Cloud has several new innovations giving you deeper visibility ...

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...