Hi all,
We have in our productive splunk architecture a very unpleasant problem.
The rolling-restart behaves not as he should. Be it creating anindex or otherwise. In arolling-restart, e...
Hello,
I have a 3-node (Windows 2012 R2 based) Search Head Cluster currently connected to a standalone indexer.
I wanted to follow the non-rolling upgrade procedure (anticipating it will be s...
When Cluster Master initiates arestart either by "splunk apply cluster-bundle" or "splunk rolling-restartcluster-peers" many of the indexers fails to restart - the server is told to restart, it s...
During graceful indexer/HF restart/stop (basically where ever splunktcp is configured) if you see last entries in metrics.log before splunk finally stops. Where splunktcpin queue (name=s...
Hello, I am running Splunk Enterprise 9.0.2 on a Multi Site IndexerCluster. In the Cluster Master, under settings >> IndexerClustering I have started a Searchable IndexerRollingrestart (n...
...eployer and I can do arollingrestartof the search head members, but the indexers must be brought down all at once. Am I missing something in the docs? Or is it acceptable to somehow combine the two b...
We have in indexcluster:
two node indexcluster
two sites (one index peer in each site)
We are seeing an issue whereby rollingrestarts of our indexcluster is causing indexing issues o...
...earchable" rollingrestart, each peer is actually offlined and not simply shut down. But for a normal rollingrestart, how does the indexer shutdown? How does this work from the cluster masters p...
...imply make the changes live; no restart. We are finding that much of the capability to make those sorts of changes without the indexers restarting are now gone since moving to clustering. While arolling...
...ocumentation Integrate with a single-site indexercluster Do I need to execute on all the SHC and then do arollingrestart? OR I need to execute on one SH, perform the restartand then follow the s...