https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Index-filesystem-recommendations/m-p/360288#M3144 <P>Hello all! Happy new year. I have my splunk indexes going to a filesystem that is XFS with the following mount options:</P> <P>/dev/md0 on /opt/splunk type xfs (rw,relatime,attr2,inode64,sunit=1024,swidth=4096,noquota)</P> <P>I am seeing performance issues and do want to leave no stone unturned. What are peoples thoughts on these mount options? What should I change if any?</P> Tue, 02 Jan 2018 16:35:05 GMT brent_weaver 2018-01-02T16:35:05Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Index-filesystem-recommendations/m-p/360288#M3144 <P>Hello all! Happy new year. I have my splunk indexes going to a filesystem that is XFS with the following mount options:</P> <P>/dev/md0 on /opt/splunk type xfs (rw,relatime,attr2,inode64,sunit=1024,swidth=4096,noquota)</P> <P>I am seeing performance issues and do want to leave no stone unturned. What are peoples thoughts on these mount options? What should I change if any?</P> Tue, 02 Jan 2018 16:35:05 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Index-filesystem-recommendations/m-p/360288#M3144 brent_weaver 2018-01-02T16:35:05Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Index-filesystem-recommendations/m-p/360289#M3145 <P>Concerning these mount options, I think that those would be fine. My only concern would be the sunit and swidth options, which should be set based on the hardware RAID options that you are using.</P> <P><A href="http://xfs.org/index.php/XFS_FAQ#Q:_How_to_calculate_the_correct_sunit.2Cswidth_values_for_optimal_performance">http://xfs.org/index.php/XFS_FAQ#Q:_How_to_calculate_the_correct_sunit.2Cswidth_values_for_optimal_performance</A></P> Fri, 12 Jan 2018 17:52:03 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Index-filesystem-recommendations/m-p/360289#M3145 simon_branton_h 2018-01-12T17:52:03Z