...ell, then we permanently remove the old peerA:
- splunk remove cluster-peers -peers
- Repeat until all peers are removed from Cluster and moved to the new hosts.
Do you guys think this c...
I have 3 indexers in cluster master. (Indexer 1, indexer2 and indexer3)
I need to stop indexer2 and indexer3 permanently.
To Stop the indexers in the cluster, I use "offline" command. It stops t...
...s I assume is the fix for the second one.
We need tomove the Indexers physically toanother location and that is why they are looking to decommission one site.
Current Setup
Site 1 – 3 I...
Hello Everyone,
I am having trouble understanding the site_replication_factor and site_search_factor options.
I have two sites with one search peer each. I want the data that one site receives to...
...search and delete operation through a search head. As per the splunk documentation this delete will be synced to the other site. But that is not happening! The deleted events are still present in site...
...eem that a data redudancy occur on site 1,
For example I have an index which is limited to 15Gb :
Site1 : idx1 : full (15gb/15gb)
Site1 : idx2 : full (15gb/15gb)
Site2 : idx1 : full (15gb/1...
...erver.conf to the 3 I want moved tosite B
disable maintenance mode
rebalance?
It seems too easy so I am hesitant.
We run the sites as such:
multisite = true
replication_factor = 2
site...
Hi all,
Am planning a multi site clustering (2 site) installation of Splunk 6.3 as the small start deployment.
Now I'm confused that I can start 2 peers ( 1 peer on 1 site ) or need 3 peers a...
Hello. Our site does not currently use or have a particular need for indexer clustering. We are, however, about to shut down the datacenter that holds our indexers and move that functionality toa...