Deployment Architecture

Cluster peers restart and primacy reassignment

clagese
Explorer

During an intentionally peer restart, are its primary buckets always reassigned to the other cluster peers?

Namely I would like to know what happends to the primary buckets when the cluster is restarted using the command "splunk rolling restart cluster-peers" or when I apply a configuration bundle to the peers using the command "splunk apply cluster-bundle".
In these cases of cluster restart, are the primary copies of each peer reassigned and how it's done?

Tags (1)

hexx
Splunk Employee
Splunk Employee

Primary buckets held by a given cluster peer will be re-assigned when the peer is restarted or becomes unavailable, regardless of the method used for restart. The purpose of a rolling restart (which 'splunk apply cluster-bundle' calls) is to orchestrate the restart in a way that allows this bucket primacy re-assignment to be done gracefully.

In the future, we hope to implement a 'cluster service mode' that will allow you to perform operations on your cluster without some of the cost currently incurred by a rolling restart - although this has more to do with bucket copies/rebuilds to respect rep/search factors than primacy re-assignment (we always need one primary bucket).

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...