Knowledge Management

Replication problem , how to see the contents of replication bundle ?

akhil4mdev
Explorer

I created two collections in collection.conf of a app

Collections name r [ipaddress] [devices]

And it doesn’t have any other attributes
So what I got to know by default the “replicate=false”
So it is not replicated to indexers

Is there any way to make sure that the collections wil never replicate can we blacklist the collections (includ,exclud) in distsearch.conf of that particular app ?

Or is there any way to see
That these collections r replicated or not to indexers from looking into the bundle ?
Please help me

Tags (1)
0 Karma

somesoni2
Revered Legend

See this link for location of knowledge bundles on the search peer/indexers.

http://docs.splunk.com/Documentation/Splunk/7.1.0/DistSearch/Whatsearchheadssend#Location_of_the_kno...

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...