All Apps and Add-ons

Is there an _internal search to identify DB paths Splunk index data was written to, preferably by index?

mcomfurf
Path Finder

I'm troubleshooting a possible configuration change to splunk-launch.conf and wonder if there is a search I can run in Enterprise that will tell me what paths the Splunk index data was written to, preferably by index.

Tags (4)
0 Karma

Runals
Motivator

I would install the app Firebrigade. Great insight into your indexes.

0 Karma

aholzer
Motivator

Use dbinspect command. It will give you the breakdown of where the data is stored by bucket.

| dbinspect index=yourindex
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...