Deployment Architecture

What should we do with the replication factor when half of the indexers are off?

danielbb
Motivator

Half of the eight indexers will be off for potentially a day, so we'll have four indexers available for that time. Our replication/search factor is 2:2 and we wonder whether to leave it as 2:2, increase it to 3:3 or take it down to 1:1.

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
Hi
Have you S2 in use or multisite cluster or traditional single site cluster with local disks/volumes?
r. Ismo
0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...