Knowledge Management

Could someone tell us about the introduction of SmartStore only for a site of multi site cluster?

skasagawa
Explorer

My Customer have a multi-site cluster (site1, site2), and they are considering introducing a new site3.
They are considering introducing the SmartStore only to this site3 indexer cluster.
We think that it is necessary to describe the setting of SmartStore in "Local" of the indexer of site3 instead of distribution from the cluster master, because the SmartStore only to site3 indexer cluster.

Please tell us about the introduction of SmartStore in a multi-site cluster.

Also, RF and SF values must be the same when introducing the SmartStore, we think it is necessary to change the current settings as follows.

[Current setting]

 

 

# Multi site settings
multisite = true
available_sites = site1, site2
site_replication_factor = origin:3, site2:2, total:5
site_search_factor = origin:2, site2:1, total:3

 

 

[After changing the settings]

 

 

# Multi site settings
multisite = true
available_sites = site1, site2, site3
site_replication_factor = origin:3, site2:2, site3:2, total:7
site_search_factor = origin:2, site2:1, site3:2, total:5

 

 

Please tell us anything else we should be careful about these case.

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Avoid Certificate Expiry Issues in Splunk Enterprise with Certificate Assist

This blog post is part 2 of 4 of a series on Splunk Assist. Click the links below to see the other ...

Using Machine Learning for Hunting Security Threats

REGISTER NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more ...

Security Highlights | November 2022 Newsletter

 November 2022 2022 Gartner Magic Quadrant for SIEM: Splunk Named a Leader for the 9th Year in a RowSplunk is ...