Daily Licensing is ~4.5 TB/day & around 170 correlation searches with ES.
We are migrating from old 60 indexers m4.10xlarge to new 40 i3.16xlarge. I've already added 40 new indexers(i3.16xlarge) with 20 on each site & data rebalancing on the cluster is also complete with SF/RF met.
Now i need to decommission old 60 m4.10xlarge from the indexer cluster. I would like to know your thoughts for removing these indexers from the cluster without any impact on data & search performance such that we can remove multiple indexers at a time.
Removing indexers in parallel from both the site may cause loosing both the primary copies as SF=2&RF=3 is configured & will generate inconsistent search result.
... View more
Currently, i'm decommissioning a few indexers in a multi-site indexer cluster with 2 sites having RF=3 & SF=2 . Right now, there are a total of 100 indexers with 50 indexers each per site.
I need to decommission 60 indexers (30 from each site). The plan is to put the 60 indexers in detention mode and make one peer offline by using enforce counts at a time.
In order to reduce the duration of the entire decommissioning, can we put multiple peers offline at a time from a site without impacting the search consistency?
If not, then i would like to know your thoughts on the impact of decommissioning more than 1 indexer per site at a time.
Thanks in advance,
... View more