hi I wanna deploymultisiteclusterwith 2 sites, 1 in-branch and another in a datacenter, I have 1 indexer for each site, I wanna each site have a copy of another site if the one site goes down, b...
Hi,
i am trying to setup Multisiteindexer site cluster, but am unable to so. here is what am doing.
Master Node server.conf:
[general]
site = site1
[clustering]
mode = master
p...
I am setting up a multisiteclusterwith 2 indexers and 1 sh in each site, 2 sites (for now). I've created 2 extra indexes in $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf and s...
According to https://docs.splunk.com/Documentation/Splunk/8.0.3/Indexer/AboutSmartStore#Current_restrictions_on_SmartStore_use
"For multisiteclusters, if any SmartStoreindexes use report a...
...mplement smartstore in a multisitecluster(1 region, 2 AZ). Roughly i am looking at: 1 x SH - M4.10xlarge - concern here being that docs say it supports up to 20 concurrent users for ES - we will have 30....
...ocs below: this can be done in 2 ways; single-site or multisite: https://docs.splunk.com/Documentation/Splunk/6.3.3/Indexer/Configuremulti-clustersearch I have some ideas of how both work but I need m...
...apability. In theory, all of the data in my cluster should replicate to my failover region and I should be able to simply point my new Splunk instances to it and go. Has anyone ever tested this out and have i...
...ocs.splunk.com/Documentation/Splunk/8.2.0/Indexer/Multisitearchitecture 2. The other thing thats suggested to have knowledge bundle and search artifact replication is to have a SH cluster...