Imbalanced KV-Store memory usage in SHC

Knowledge Management

Hi all,

I am witnessing a strange imbalance in the KV-Store memory (disk) usage across my SHC members.

While one host (SH1, SHC captain) is using 38 GB total storage space, SH2 is using 56 GB, and SH3 only 19GB. Numbers are derived from the MC KV-Store instance dashboard.

To my understanding, the KV-Store should by balanced over my search head cluster!? I am seeing no replication errors, hence I am wondering how this can happen, and how I can fix it.

I'm running Splunk 7.2.1 on SLES 12 SP3

Get Updates on the Splunk Community!

Mastering Threat Intelligence in ES 8.5, Splunk AI Assistant v2, and More from Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Break the Build: Inside the KubeDoom Lounge at .conf26

You step up to the machine. The pixelated corridors of a certain 1993 FPS load in front of you, EMP Pulse ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...