Splunk Enterprise

Splunk Smartstore and peers down

jariw
Path Finder

L.s.,

We are at the beginning of a migration to Smartstore. We are reading/ following Migrate existing data on an indexer cluster to SmartStore - Splunk Documentation .

One thing is worrying to us.. bullet 7 in the "Run the migration on the indexer cluster". It says "Stop all the peer nodes."... not so nice on a production cluster.

Is this really necessary? Isn't it possible to do ithis part with the deployment from the MC? So not all peers goes down at the same time (and losing data).

Thanks in advance for the answer.

 

Jari

 

Tags (1)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @jariw,

In my experience maintenance-mode and stopping all peer nodes is not necessary.

You will already push the configuration from Cluster Manager. Before pushing new configuration, do not forget testing your new indexes.conf configuration on a standalone instance and repFactor=auto setting (as said  on item 8.a).

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

jariw
Path Finder

Thanks, this is what i was hoping for.

So the manual is in this case only for safety i suppose. Already tested it on a development environment and then questioned myself why taking the peers down.

Will continue testing.

 

greetz

Jari

0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @jariw,

In my experience maintenance-mode and stopping all peer nodes is not necessary.

You will already push the configuration from Cluster Manager. Before pushing new configuration, do not forget testing your new indexes.conf configuration on a standalone instance and repFactor=auto setting (as said  on item 8.a).

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...

Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the ...

What has been announced?  In the blog, “Preparing your Splunk Environment for OpensSSL3,”we announced the ...

New This Month in Splunk Observability Cloud - Synthetic Monitoring updates, UI ...

This month, we’re delivering several platform, infrastructure, application and digital experience monitoring ...