Hello all:
Need to remove a peer from cluster due to sync errors. Then re-add to sync up correctly (per support). It's the only peer to the master with a replication factor of 2.
Is splunk offline or splunk offline --enforce-counts the appropriate way to remove the peer?
The following article seems to suggest that the peer won't shutdown (but will it be removed?) due to the number of peers < the replication factor.
http://docs.splunk.com/Documentation/Splunk/5.0.5/Indexer/Takeapeeroffline#Take_a_peer_down_permanently:_the_enforce-counts_offline_command
Thanks.
... View more