Getting Data In

Storing the SPLUNK logs on hard disks (different from C partition)

twieczorkowski
Explorer

Hi,

I'v just installed the physical server and the SPLUNK application.
Windows Server 2008 R2 (x64 - SPLUNK).
On this server there is a RAID 5 and 2 partitions C (80GB) and D (500GB).

The system and the SPLUNK is installed on the "C" drive.

I'would like to store much more data than 80GB. So the system partition is not enough.
I wold like to store the SPLUNK data (logs etc) on D partition.

Is there such a possibility or I will have to reinstall this server and create one big partition for system and SPLUNK?

BR,
Tom

Tags (2)
0 Karma

alberttra
Engager

Hi, i can see the path index, but i can not change it? Can you think of any reason?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

@alberttra This question is almost 7 years old so you're unlikely to get many responses. You should post a new question.

---
If this reply helps you, Karma would be appreciated.
0 Karma

nelsonb
Explorer

You can designate the location of the indexes under "Manager» System settings» General settings". From there scroll down to Index Settings and designate the new Path to indexes. You should be able to point it to your second partition there.

Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...