topic Does Splunk support EXT4 yet? in Deployment Architecture

Does Splunk support EXT4 yet?

maverick — Thu, 17 Mar 2011 05:18:59 GMT

Does Splunk support EXT4 file system? According to system requirements, EXT2/3 is supported.

Are there any benchmarks regarding iops to EXT4 as compared to, say, XFS?

I believe RHEL 5.6 x86_64 fully supports it and it would be nice to take advantage of the I/O improvements it offers, if there is an advantage.

Re: Does Splunk support EXT4 yet?

jrodman — Thu, 17 Mar 2011 06:12:53 GMT

Not tested, thus not officially supported.

Its unclear at this time if Splunk I/O patterns will show a noticeable improvement on ext4 or a major improvement or nada. I suspect the results will be in the single digit percentage points.

For external folks, file enhancement requests if you are interested in this, each one will count.

For internal (field) folks, file enhancement requests, and optionally contact product management.

Its been filed as at least ENH-4281 and ENH-4288 already.

Update: Apparently a tipping point was reached and it is planned for a future release (subject to change as always).

Re: Does Splunk support EXT4 yet?

au_chrismor — Tue, 21 Feb 2012 08:40:33 GMT

My experience with 4.3 on OpenSUSE 12.1 (x64) has been no problems to report, and no appreciable performance change over ext3 on the same hardware.

Re: Does Splunk support EXT4 yet?

the_wolverine — Tue, 08 Oct 2013 20:41:12 GMT

EXT4 is supported now.