Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- What will happen if shared storage goes crash when...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am thinking to use search head pooling. But I am not sure what will happen if shared storage goes crash. Can somebody answer to my questions as bellow?
- Can user login the spluk search head?
- Can scheduled search work properly?
- Which configuration will work at that time? The configuration under system direcotry of each search head just work?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I found answer to following questions.
Can user login the spluk search head?
Authentication configuration is stored in local disk in each search head. So, user can login the search head, but most of configurations in share storage is not available, user can not use any App.Can scheduled search work properly?
No. Because all configuration in shared storage is not available.Which configuration will work at that time? The configuration under system direcotry of each search head just work?
User can not use configuration on search head polling. He will need to disable search head pooling if he want to use local configurations.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can mitigate your position by implementing a NAS or Clustered Storage architecture with failover.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I found answer to following questions.
Can user login the spluk search head?
Authentication configuration is stored in local disk in each search head. So, user can login the search head, but most of configurations in share storage is not available, user can not use any App.Can scheduled search work properly?
No. Because all configuration in shared storage is not available.Which configuration will work at that time? The configuration under system direcotry of each search head just work?
User can not use configuration on search head polling. He will need to disable search head pooling if he want to use local configurations.
What Is Splunk? Here’s What You Can Do with Splunk
Level Up Your .conf25: Splunk Arcade Comes to Boston
Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...
