W/ Distributed deployment, Does Manger maintain data role? Is it normal for Redis Queuing on Receiver during manager reboot?

[Bal33p]

Version

2.4.40

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Distributed

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

32

RAM

128

Storage for /

500g

Storage for /nsm

30tb

Network Traffic Collection

other (please provide detail below)

Network Traffic Speeds

more than 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

Please correct me if I am wrong, but I read that the Manager should not have a data role defined after the initial installation.
#11062 (reply in thread)

Also if i reboot my manager the receiver node spools instead of sending direct to the search node. Is that normal
I thought I should be able to shut down the manager, and everything would still flow through the pipeline from receiver to search.
Trying to figure out if I have a problem on my hands or not
Thanks for your help

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.