Splunk Inc.
MANAGEMENT OF JOURNAL ENTRIES ASSOCIATED WITH CUSTOMIZATIONS OF KNOWLEDGE OBJECTS IN A SEARCH HEAD CLUSTER

Abstract:

Replication of search-related configuration customizations across multiple individual configuration files of search heads of a cluster for a consistent user experience. A search head leader of the cluster can receive a first journal entry relating to a first customization of a knowledge object from a first search head of the cluster. The search head leader may determine that the first journal entry references a parent commit journal entry matching a latest commit journal entry in a journal maintained by the search head leader. The first journal entry can be stored in the journal and sent to one or more search heads of the cluster.