Deployment Architecture

Splunk replication factor and search factor modifications

ankithreddy777
Contributor

If I increase my replication factor or the search factor. Does this changes are applicable to old buckets?

suppose I increase search factor from 1 to 2.
Does searchable copies for old buckets prior to current time will also increase to 2?

Similarly,
suppose I increase repliactionfactor from 1 to 2.
Does replicatedcopies for old buckets prior to current time will also increase to 2?

0 Karma

adonio
Ultra Champion

yes,
read answer here:
https://answers.splunk.com/answers/401010/is-it-possible-to-increase-the-replication-and-sea.html
used it in the past. prepare for disk usage increase.
~15% for RF and ~35% for SF of the size of the data you have.
so if you have 100GB on disk (indexes) with RF=1 and SF=1 if you increase to RF=2 anticipate 15GB growth on disk
hope it helps

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...