...cenario, the cluster never reached search and replication factors.
Currently, I am running the cluster with the configuration that is listed first. When I take out a search peer, the data that was in it w...
...ltimately retire the 4 old indexers once the data is redistributed across the cluster. But, once all of the indexers are in the same cluster I seem to have two options (I think) for making sure that data i...
...hat I currently have (while moving from Splunk 7.0.0 to Splunk 8.x in the process). It seems to me that I have two options: Option 1 Create a new indexer cluster with the 4 new indexers, so that I h...
...nstallation wizard. The strange thing is that the certificate options do not show up in any of the configuration files after the installation is complete and forwarding also does not work. Has anyone s...
...nterprise indexer clusters, one of them is our prod infrastructure spanned across two geo-separated datacenters, with 8 nodes total, 4 in each geo-site. We also have nonprod, which is a very similar s...
I am setting up Fire Brigade v 2.0.3 to monitor my splunk deployment (using index clustering with RF = 5 and SF = 3). The documentation for Fire Brigade provided a brief discussion for a few options...
...ithin the transforms.conf and pushing it through the deployer. Lookup shows up on all the SH members in the cluster, although, when I open it up to review its configuration, it looks broken. The name a...
I am looking for options to automate the upgrade of Add-on in Clustered environment
Say for example, I have this add-on Splunk_TA_nix in SHCluster (which we have one deployer and 3 search head m...