topic Re: Splunk maintenance in Splunk Search

Splunk maintenance

teddyidc1101 — Wed, 16 May 2018 00:02:22 GMT

Is there maintenance procedure that Splunk Enterprise/deployment/instance requires periodically to ensure high performance?

Is there an app that can be used to this?

Please share. thanks!

Re: Splunk maintenance

HiroshiSatoh — Wed, 16 May 2018 01:18:30 GMT

Is it the maintenance of "Splunk Enterprise"? Or is it a deployment server maintenance?

Splunk does not need maintenance in particular, and I think that it is enough to restart the server at regular intervals.

If you need advanced performance, please refer to the administrator's manual etc.

Capacity Planning Manual
http://docs.splunk.com/Documentation/Splunk/7.1.0/Capacity/Referencehardware

Optimize Splunk for peak performance
https://docs.splunk.com/Documentation/Splunk/7.1.0/Admin/OptimizeSplunkforpeakperformance

Splunk Sizing and Performance
https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html

Re: Splunk maintenance

teddyidc1101 — Wed, 16 May 2018 01:39:21 GMT

Thanks for sharing!
To answer your question, i would say for both.

So that would mean a that if the hardware and software are performing well and being maintained on a regular basis, Splunk Enterprise will be ok already?

Re: Splunk maintenance

HiroshiSatoh — Wed, 16 May 2018 02:19:31 GMT

We monitor server monitoring, process monitoring, resource monitoring, log reception monitoring as normal operation confirmation.

Re: Splunk maintenance

teddyidc1101 — Wed, 16 May 2018 13:07:06 GMT

ok thanks! this clears up things 🙂