Splunk Enterprise

Source-site-based replication factor: There is no way to set RF and SF based on which site the originates from?

PickleRick
SplunkTrust
SplunkTrust

Just making sure that I didn't miss something. There is no way to set RF and SF based on which site the originates from? I mean - let's say that I have two sites and I don't want the data to be replicated between sites in any way. The customer understand that there is no site-level data resiliency and in case of a site outage faces unavailability of all the buckets stored at that site and is OK with that. I know that I could simply do - for example - origin:2, total:2 but that means that I have to have the same settings in both sites but if I wanted to have different settings at each site? Of course I could do separate clusters at each site but that also means more fuss with managing configurations - deploying apps and so on.

Anything I missed?

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...