Data Replication Issue - Splunk Enterprise Troubleshooting Use Case - 1

11.06.24 07:03 PM - By Ramany Muthusamy

Issue:

Indexed data is present only on 1 indexer and is not replicated across peers / indexers.

Root Cause:
repFactor = auto” property is missing


Solution:
Add “repFactor=auto” under the index stanza, which requires replication.
Step-1: In Cluster Manager node, edit the “indexes.conf” file.
Step-2: Deploy the bundle to Peers using CLI or GUI
Step-3: Check the replication status for each index to make sure changes are reflecting.

Ramany Muthusamy