Hi,
I have 2 sites
2 Indexer cluster master
2 deployers
30 Indexers
30 Search Heads
What is the Replication factor and search head factor?
Hi
If I read this right, you have two identical sites with single site IDX clusters. Probably you also have shared SHs to both sites as individual SHCs?
Based on that I said that “normal” SF=2 and RF=3 should be enough. Of course you could increase those, but mostly that just generate more disk usage and costs without any real benefits.
Why you have two CM and two Deployer? Also I’m wondering your SH count vs. IDX count.
r. Ismo
Replication and search factors are not imposed on you by the number of servers (well, of course you can't have more copies of a single bucket than splunk instances - that's a limitation). It's up to you to configure it according to your needs.