Deployment Architecture

Can my indexer cluster contain a mix of SmartStore and non-SmartStore indexes?

Steve_G_
Splunk Employee
Splunk Employee

I want to use SmartStore for some indexes but not for others. Can I do that?

1 Solution

Steve_G_
Splunk Employee
Splunk Employee

Yes. Like most indexing-related settings, you can configure SmartStore on a per-index basis.

A combination of SmartStore and non-SmartStore indexes on a single cluster is sometimes referred to as a "mixed mode" cluster.

See https://docs.splunk.com/Documentation/Splunk/7.2.0/Indexer/ChooseSmartStorestoragelocation

View solution in original post

Steve_G_
Splunk Employee
Splunk Employee

Yes. Like most indexing-related settings, you can configure SmartStore on a per-index basis.

A combination of SmartStore and non-SmartStore indexes on a single cluster is sometimes referred to as a "mixed mode" cluster.

See https://docs.splunk.com/Documentation/Splunk/7.2.0/Indexer/ChooseSmartStorestoragelocation

Get Updates on the Splunk Community!

Holistic Visibility and Effective Alerting Across IT and OT Assets

Instead of effective and unified solutions, they’re left with tool fatigue, disjointed alerts and siloed ...

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...