Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
256 results
Sorted by:
02-24-2023
08:10 AM
When one configures the indexer cluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...
- Tags:
- S3 bucket
- smartstore
Labels
- Labels:
-
other
11-30-2019
09:28 PM
1 Karma
Hello All, today someone asked me a question about bucket movement in an indexer cluster. Lets say i have 5 indexer in a cluster and i have an index called operations. My question is as follows. A...
03-12-2019
01:55 AM
Indexer in the cluster was abruptly shutdown and subsequently fail to join back to the cluster. Please help to provide the steps to clean up the standalone buckets to allow the indexer to join back t...
Labels
- Labels:
-
indexer
Show results in replies (8)
-
When the indexer is disabled as search peer, the hot buckets are rolled over to warm using the s...
-
To solve this problem you need to find and rename the offending bucket. If there is many such buckets...
-
...ode, the affected Indexer had an outage at storage level and then it was unable to join back the cluster...
-
One correct per Splunk docs (and observation) the GUID is the GUID of the local indexer: How the indexer...
-
how did you manage to find the standalone bucket using that naming convention ? can u plz give an example ?
-
Thanks ! It help me to recover 2 failed nodes in my cluster
-
Thanks for the clarification, have revised the path to the indexes db-folders to $SPLUNK_HOME/var/l...
-
Thanks, Keio! Clarification: in step #2, "Scan through the indexes db-folders" means var/lib/s...
08-25-2022
07:23 AM
Hello guys,
if we add new indexer to existing cluster of 3 indexers with RF=3 and SF=3, how will be spread primary and replicated buckets?
Will 4th indexer receive replicated buckets too?
T...
Labels
05-06-2022
11:27 AM
Hello!
I am looking for your help. I have 2 indexer nodes in a splunk indexer cluster with rf=2 and sf=2 and we want to add 2 more nodes to this site, I only have one virtual site. I need your h...
Labels
- Labels:
-
indexer clustering
07-21-2022
05:13 AM
...bsp;
So while checking we fig out like for a particular index we can only have 55 days of logs in out hot bucket n when we see the log consumption for this index is nearly about 12-14gb per day
And...
Labels
- Labels:
-
indexer
-
indexer clustering
-
other
03-01-2020
09:23 PM
Just got my license this past week and I've been having a blast setting up. Amazing program. Anyway, I'm running into an Index Cluster Question. I've got a separate Master Node and three indexer...
09-02-2022
01:11 PM
...ractice, poor judgement, or as intended.
We have 8 main indexers that do what indexers do, all clustered as peer nodes.
The deployment server is the master node and the search head for the cluster (w...
Labels
- Labels:
-
indexer clustering
-
other
06-03-2019
01:29 PM
Hi , we migrated an indexer from non clustered to a clustered environment , i know the naming convention for clustered and non clustered buckets are different. So is the data which lies in non cluster...
- Tags:
- splunk-enterprise
04-06-2021
02:47 AM
Hi, I'm currently running Splunk 7.3.0 and have 32 indexes running in a single cluster with 2 peers. Indexes are being replicated across both peers. Everything was working fine u...
Labels
- Labels:
-
administration
-
troubleshooting
