This session will highlight a new strategy for fast and effective replication of knowledge bundles, resulting in up-to-date search results and a significant reduction in WAN bandwidth usage. Knowledge bundles include the knowledge objects that a search-head distributes to search peers so that they can process a distributed search. Replication of these bundles to search peers can be slow for large deployments and also consumes significant WAN bandwidth, especially in multi-site deployments. This new replication option in Splunk Enterprise accelerates search access to recent data and reduces WAN bandwidth consumption.
Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2514.pdf?podcast=1577146224