splunk / splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Dynamic search head cluster captain

Bulat-Gumerov opened this issue · comments

Can you add a new feature to support dynamic search head cluster captain creation during deployment? We are using it in our SOC since it more fault-tolerant. I can understand your approach that it is easier to have a static SH captain during initial SH cluster deployment, but your documentation says:

A cluster normally uses a dynamic captain, which can change over time. The dynamic captain is chosen by periodic elections, in which a majority of all cluster members must agree on the captain. See "Captain election."

If a cluster loses the majority of its members, therefore, it cannot elect a captain and cannot continue to function. You can work around this situation by reconfiguring the cluster to use a static captain in place of the dynamic captain.