Getting Data In

Migrating my current indexer cluster to a multisite cluster, if I add two new indexers, will old data be replicated?



I have cluster with two indexers (A,B), and a lot of indexed data.
I want to add two new indexers (C,D), and decided to do a multisite clustering: site1- A,B ; site2 - C,D.

I want to set replication and search factors to 3: origin 2, all 1 and wonder if old indexed data (on A and B) would be replicated to site2?

0 Karma

Splunk Employee
Splunk Employee

No they won't be. They'll behave like single-site buckets - and only replicate within the site that they were created (A,B), and follow the old single-site replication_factor search_factor policies. (Your new buckets will follow the new multi-site configuration). See

0 Karma
Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...