Implementing Splunk 7 - Third Edition

Syntax

You configure the site replication factor with the site_replication_factor attribute, which resides in the master server.conf file. This attribute resides in the [clustering] stanza, in place of the single-site replication_factor attribute. For example:

[clustering] 
mode = master 
multisite=true 
available_sites=site1,site2 
site_replication_factor = origin:2,total:3 
site_search_factor = origin:1,total:2 

Here is the actual syntax required:

site_replication_factor = origin:<n>, [site1:<n>,] [site2:<n>,]  ..., total:<n> 

Where:

• <n> (positive integer indicating the number of copies of a bucket)
• origin:<n> (sets the minimum number of copies of a bucket that will be held on the site originating the data in that bucket)
• site1:<n>, site2:<n> ...