Can we do summary index replication in indexer cluster by using replication_factor and search factor ... View more

Hi We are doing upgrade from 6.3.2 to 6.5.1. We have a search head cluster and indexer cluster in our Splunk setup. In doc http://docs.splunk.com/Documentation/Splunk/6.5.1/Indexer/Upgradeacluster First It says "When you upgrade a 6.x indexer cluster, such as 6.2, to a later 6.x cluster, such as 6.3 or 6.4, you must take all cluster nodes offline. You cannot perform a rolling, online upgrade." And later it says "Perform the following steps: 1. Stop the master. 2. Stop all the peers and search heads. When bringing down the peers, use the splunk stop command, not splunk offline." So first it says you need to take all cluster nodes (Peer nodes) offline, and then second it says do not splunk offline command. It is confusing, so please help me. Should I use the splunk offline command or splunk stop command for peer nodes and search head nodes in a search head cluster? ... View more