Hi there,
There are recommendations around latency between Search Head cluster members or IDX cluster members but are there any guidelines on latency requirements between search heads and search peers?
Thanks,
Saeed
There are but I think you have to contact support or PS for details about your environment.
Some basics are listed here: https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Referencehardware
I think a rule of thumb is, for a single site, stay below 100ms.
Edit: Corrected the 150 to 100ms.
Skalli
Hi Skalli,
Thanks for your response. Yeah I got the figures for accepted latency between search head peers or indexer members from that same document but there is no reference for latency between search heads and indexers.
Saeed
I just asked some colleagues and found out that this got documented: https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Referencehardware
For indexer cluster nodes, network latency should not exceed 100 milliseconds.
Skalli