...s I assume is the fix for the second one.
We need to move the Indexers physically to another location and that is why they are looking to decommission one site.
Current Setup
Site 1 – 3 Indexer...
Current Environment has an IndexerClustering Multisite setup with Site 1 and Site 2. We plan to decommissionsite 2 and wanted to know the impact on IndexerClustering.
I am planning amultisitearchitecture.
I have 3 sites in 3 different locations (different countries across Europe) and the first thing I need is to store local indexed data locally on each site...
Hello,
we would like to setup amultisiteindexercluster with 4 sites (1 to 4).
Two of these sites (1 and 2) should have at least on copy of each bucket replicated and searchable.
The two o...
I am currently needing to change our single sitecluster to a two indexer configuration that is peered for ease of maintenance for the next person who replaces me at this site. I currently have 2 indexer...
I wonder whether during a Splunk upgrade we can use our two sites of the multisiteindexercluster to improve the Splunk upgrade. Meaning, is it possible to upgrade the indexers of one siteand t...
Hello Splunk Gurus,
I have amultisiteindexing clusterin Splunk 6.6.1 spanning two sites: small & big.
The "big/site1" site is configured with RF=3/SF=2.
Due to having way less disk, t...
I have three geographically separated sites where I am implementing amultisite Splunk IndexerCluster. The master site will have (1) search head, a (2) clustered indexers, (1) master node, and (1...
Hello Experts,
I am setting up new clustered environment with below setup. Need advice on recommended configurations.
Indexercluster - 2 sites - 1 server each site
Search head cluster - 2 site...
I am deploying Universal Forwarders by either Puppet or SCCM to multiple hosts. They will be forwarding to a 6.3.0 multisiteindexercluster.
Is there a way to set site=site0 in the system/l...