A customer is migrating their existing Splunk Indexer from an old set of hardware to a new set of indexers. What is the earliest method to migrate the system?
A.
1. Add new indexers to the cluster as peers, in the same site (if needed).
2.Ensure new indexers receive common configuration.
3.Decommission old indexers (one at a time) to allow time for CM to fix/migrate buckets to new hardware.
4.Remove all the old indexers from the CM’s list.
B.
1. Add new indexers to the cluster as peers, to a new site.
2.Ensure new indexers receive common configuration from the CM.
3.Decommission old indexers (one at a time) to allow time for CM to fix/migrate buckets to new hardware.
4.Remove all the old indexers from the CM’s list.
C.
1. Add new indexers to the cluster as peers, in the same site.
2.Update the replication factor by +1 to Instruct the cluster to start replicating to new peers.
3.Allow time for CM to fix/migrate buckets to new hardware.
4.Remove all the old indexers from the CM’s list.
D.
1. Add new indexers to the cluster as new site.
2.Update cluster master (CM) server.conf to include the new available site.
3.Allow time for CM to fix/migrate buckets to new hardware.
The correct method to migrate the indexers from an old set of hardware to a new set of indexers is option C. This method ensures that the new indexers are added to the same site as the old indexers, and that the replication factor is increased by one to instruct the cluster to start replicating data to the new peers. This way, the cluster can maintain data availability and integrity during the migration process. After allowing enough time for the cluster master to fix and migrate buckets to the new hardware, the old indexers can be removed from the cluster master’s list. References:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit