Read-Only Minions

Before removing minions from an existing cluster, you must convert them to a read-only state.

Read-only minions are searchable throughout the API and user interface but are not used for sensor checkins or event/datastore pushes. While minions are in the read-only state, the system copies the binary files to the primary node.

The event data is not added to the minions and existing data is purged periodically as in normal operations. Therefore, the read-only minions become completely inactive after the retention period. After the desired data retention period expires, you can safely remove the read-only minions.

You can revert read-only minions to active minions at any time.