Deployment Architecture

Changing RF and SF on Cluster Master

dcroteau
Splunk Employee
Splunk Employee

I wanted to change the RF and SF to 2 and 2. I see an edit button on the cluster master > indexer cluster next to the RF and SF values. Can u plz confirm that changing the RF /SF is as simple as changing the value on from the cluster master GUI?
I tried searching Splunk answers but didn't find anything concrete.
So any link to a doc would be appreciated.
I just need confirmation that simply changing the value on the cluster master will do the trick and no additional steps are required.
I understand that older data will not be deleted immediately.

Tags (1)
0 Karma

dxu_splunk
Splunk Employee
Splunk Employee

yes, it'll require a Cluster Master restart (the UI should then prompt you to restart)

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...