As I prefer to upgrade to 6.3, I'm debating whether to use multi-site clustering. We don't currently replicate any data, but that could happen in the future, on a specific index level. Looking at this doc - http://docs.splunk.com/Documentation/Splunk/6.2.7/Indexer/Multisiteclusters , I'm wondering if replication is all or nothing at the clustering layer.
Does anyone know if you can specifically replicate per index with multi-site clustering?
↧