Building for the Splunk Platform

How does it affect the performance of the Splunk instance when we index more than 10 million data?

Ashwini008
Contributor

Hi,

My requirement is i need to pull more than 10 million data from database and index in splunk.

I want to understand, if this badly affects the performance of the stack, will there be any infrastructure related issues.

How can we index such huge volume of data safely into Splunk?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

It's totally depends on your Splunk and other environments is this operation heavy to splunk or not. If you have properly configured systems and those are enough powerful and your time schedule for indexing is enough, then you shouldn't have any issues with that data amount.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

This Week's Community Digest - Splunk Community Happenings [9.26.22]

Get the latest news and updates from the Splunk Community here! Upcoming User Group Events! 👏 Check ...

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...