Configuring your replication factors

Of course, as mentioned in the preceding section, it is not often that you deal with a single Splunk replication factor. Typically, you'll have a multisite index clustering model, so you'll need to calculate a full-site replication factor. This replaces the previously explained replication factor, which is specific to a single-site environment.

The features are specified on the master node, as part of the basic configuration of the cluster. They provide site-level (global) control over the location of bucket copies, in addition to providing control over the total number of copies across the entire cluster. To configure a site-level replication factor, you must set multisite=true

In the following sections ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.