We had to shut down one of the machines and create a new one. The cluster replication between the new and old ones does not work after a reboot.
The error message that was found in the splunkd.log...
Hello! We need to implement architecture ES Splunk to 400 GB in clustering (SH, IDX). How we should to count numbers of idx for this capacity? In Splunk docs recommend to use per indexer up to 1...
I need to understand in detail howindexer acknowledgement works when it comes to cluster replication, specifically when the chain of acknowledgement is terminated and the forwarder is able to r...
HttpEventCollector is an amazing and welcome feature from Splunk 6.3, but there is no documetation explaining how should it be set to work on clustering environment.
The documentation only t...
We have a single Search Head Node which works over a Indexer Cluster.
All Configurations like users, roles, Dashboards etc are present on this Node.
We are now looking to create a Search Head cluster...
...es.conf on the master and how to distribute them via apply cluster-bundle.
This works fine!
Today, I tried to do the same thing via Splunk Web. The new index gets created and is displayed on the m...
I used
https://myHost:8089/services/cluster/master/control/control/rebalance_primaries
as described in the manual at How primary rebalancing works
myHost is a functioning Cluster Master; i...
...ers from both sites?
(#3 isn't really a question, as much as an observation)
Any insight would be helpful, as it affects an active build-out that could change based on how this all actually works...
I have seen this question a few times but have not seen a solution that works. I just had an issue where 1 of my 2 clusteredindexers went down for whatever reason and I had to restart Splunk. The o...