Deployment Architecture

Can my indexer cluster contain a mix of SmartStore and non-SmartStore indexes?

Steve_G_
Splunk Employee
Splunk Employee

I want to use SmartStore for some indexes but not for others. Can I do that?

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Yes. Like most indexing-related settings, you can configure SmartStore on a per-index basis.

A combination of SmartStore and non-SmartStore indexes on a single cluster is sometimes referred to as a "mixed mode" cluster.

See https://docs.splunk.com/Documentation/Splunk/7.2.0/Indexer/ChooseSmartStorestoragelocation

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

Yes. Like most indexing-related settings, you can configure SmartStore on a per-index basis.

A combination of SmartStore and non-SmartStore indexes on a single cluster is sometimes referred to as a "mixed mode" cluster.

See https://docs.splunk.com/Documentation/Splunk/7.2.0/Indexer/ChooseSmartStorestoragelocation

Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...