I am trying to use invalid_replication_address to tell a cluster master running in front of an ELB to contact the indexer on a different address. However when i try to add the peer I get the f...
Hi,
I have done a lot of researching about sizing a Splunk Cluster and have a few in deep questions:
Settings: 100 GB a Days Index Tage; 3 NodeCluster; RF/SF 2
Scenario 1: All NodesUp a...
...N, three Indexer and three HF. Site B contains one SH, three Indexer and one HF and will be updated later. Considering that the patching of OS will require a restart of the nodes, can you please tell m...
...ssumption that the amount of disk space available was the same across all instances.
I was wondering if the following is possible:
Add the new larger indexnodes to the indexclusterStart...
Recently i upgraded our splunk enterprise version from 9.0.0 to 9.0.1 in all our master , search head & indexernodes. The order we updated is indexer - search head - master.
Once the up...
Hello,
I have an indexercluster setup. I don't want to configure a search head node in a cluster. I want to start a new Splunk Enterprise instance that I want to enable as a search head and s...
...n the remaining indexernodes. That seems suboptimal since I need to stop all the instances eventually and don't want to end up with a single indexernode holding all the data. Any ideas?
Hello,
we have a cluster environment:
- Search Head Cluster (3 nodes)
- Indexers Cluster (4 sites) 10 nodes each
actually is still with version 7.3.9 based on CentOS.
We have to migrate t...
....2, to a later 6.x cluster, such as 6.3 or 6.4, you must take down all clusternodes. You cannot perform a rolling, online upgrade. If you have a multisite cluster, however, you can upgrade one site a...