Hello dear friends, I wanted to know how the theme of synchronization and repair works in SPLUNK, Receiving data and presenting data.
I would be happy to explain more simple and broader than what is written in DOCS.
Thank you very much !
Are you asking "how is data verified, and preserved in the event of failure"?
The terms you are looking for are centred around Indexer Clusters: https://docs.splunk.com/Documentation/Splunk/7.0.0/Indexer/Aboutclusters
And specifically what happens if an indexer in a cluster fails: http://docs.splunk.com/Documentation/Splunk/7.0.0/Indexer/Whathappenswhenaslavenodegoesdown
Unless I’m just unfamiliar with some of these terms, I think you may need to expand on what you’re asking for.
