Splunk Enterprise

Splunk Smartstore and peers down

jariw
Path Finder

L.s.,

We are at the beginning of a migration to Smartstore. We are reading/ following Migrate existing data on an indexer cluster to SmartStore - Splunk Documentation .

One thing is worrying to us.. bullet 7 in the "Run the migration on the indexer cluster". It says "Stop all the peer nodes."... not so nice on a production cluster.

Is this really necessary? Isn't it possible to do ithis part with the deployment from the MC? So not all peers goes down at the same time (and losing data).

Thanks in advance for the answer.

 

Jari

 

Tags (1)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @jariw,

In my experience maintenance-mode and stopping all peer nodes is not necessary.

You will already push the configuration from Cluster Manager. Before pushing new configuration, do not forget testing your new indexes.conf configuration on a standalone instance and repFactor=auto setting (as said  on item 8.a).

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

jariw
Path Finder

Thanks, this is what i was hoping for.

So the manual is in this case only for safety i suppose. Already tested it on a development environment and then questioned myself why taking the peers down.

Will continue testing.

 

greetz

Jari

0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @jariw,

In my experience maintenance-mode and stopping all peer nodes is not necessary.

You will already push the configuration from Cluster Manager. Before pushing new configuration, do not forget testing your new indexes.conf configuration on a standalone instance and repFactor=auto setting (as said  on item 8.a).

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...