https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66964#M2198 <P>I am not 100% sure that a service will be able to mount a truecrypt volume without an interactive logon. It may be possible, but in either case you will still see a performance penalty since every read/write operation will have to be de/encrypted before splunk has access to the data. Since splunk is quite disk intensive during indexing/searching, this overhead may lead to a very sluggish system performance.</P> <P>I'd say just try it out on a dev system and report back with your findings for the good of the community <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 08 Oct 2010 23:34:37 GMT ftk 2010-10-08T23:34:37Z https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66962#M2196 <P>Hello, has anyone ever put splunkdb in a truecrypt encrypted volume succesfully? Thanks,</P> <P>Luca.</P> Fri, 08 Oct 2010 16:07:44 GMT https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66962#M2196 cafissimo 2010-10-08T16:07:44Z https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66963#M2197 <P>I have not, but if you are able to successfully run the following command on the volume, all should be well:</P> <PRE><CODE>./splunk cmd locktest </CODE></PRE> <P><A href="http://www.splunk.com/base/Documentation/4.1.5/Installation/Systemrequirements#Supported_file_systems" rel="nofollow">http://www.splunk.com/base/Documentation/4.1.5/Installation/Systemrequirements#Supported_file_systems</A></P> Fri, 08 Oct 2010 22:16:05 GMT https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66963#M2197 araitz 2010-10-08T22:16:05Z https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66964#M2198 <P>I am not 100% sure that a service will be able to mount a truecrypt volume without an interactive logon. It may be possible, but in either case you will still see a performance penalty since every read/write operation will have to be de/encrypted before splunk has access to the data. Since splunk is quite disk intensive during indexing/searching, this overhead may lead to a very sluggish system performance.</P> <P>I'd say just try it out on a dev system and report back with your findings for the good of the community <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 08 Oct 2010 23:34:37 GMT https://community.splunk.com/t5/Security/Truecrypt-and-splunk/m-p/66964#M2198 ftk 2010-10-08T23:34:37Z