Need your help,
We are trying to increase the number of indexer nodes in the indexer cluster for max availability approach. Can you please share the best Splunk replication factor vs number of indexer nodes? Because we want to use minimal storage and all time data availability for search even if one or two nodes went down in the indexer pool.
IMK, the Replication factor is set uses only criteria which depends on "How many node failure you can tolerate without data loss".
So,
Replication Factor = No of allowed Indexer failure +1
If you've 4 indexers and want all data to available even with 2 nodes failed then you need replication factor of 3 and so on.
See this for more information
IMK, the Replication factor is set uses only criteria which depends on "How many node failure you can tolerate without data loss".
So,
Replication Factor = No of allowed Indexer failure +1
If you've 4 indexers and want all data to available even with 2 nodes failed then you need replication factor of 3 and so on.
See this for more information