Having a distributed environment with N indexers and M servers sending data in a load-balanced way (autoLB=true) towards those indexers, what happens if the minimum free space is reached for one of the indexers?
The documentation says the indexer will not take any data until space is freed up and also "If one indexer is down, the forwarder immediately switches to another".
Will the load balancing algorithm on the servers just switch to the next indexer or will the data during that time frame ("The forwarder routes data to different indexers based on a specified time interval.") be lost?
... View more
I have a summary that is being run with the following parameters:
Start time (optional): -6m@m
Finish time (optional): -1m@m
Schedule type: Basic
Run every: 5 minutes
Summary indexing: checked (enabled)
The summary looks after certain data in a large, main index. The search time is about 30 seconds.
I want to send a report every 5 minutes based on a new search on the summary index above.
Which is the best way to accomplish that without messing up the intervals?
For example, I'm worried that if the indexing takes a little longer, the data will be incomplete in the report. Or, if the intervals aren't matched properly, I might run the query for the report over the previous indexing period.
Can someone explain to me if my fears are well founded and point me to some documents describing the issue in more detail?
... View more