Deployment Architecture

What does Splunk log "rollout" refer to?

nagarjuna280
Communicator

I heard the word "rollout" regarding /opt/splunk/var/log/splunk files

Tags (1)
0 Karma

somesoni2
Revered Legend

The rotation of Splunk internal logs files, available in $SPLUNK_HOME/var/log/splunk folder, is managed by log.cfg file. The by default they roll to a new file when the log file size reaches 25MB (specified in bytes) and 5 backup/rolledover files are retained. See below links for more details:

https://docs.splunk.com/Documentation/Splunk/6.5.0/Troubleshooting/WhatSplunklogsaboutitself
https://docs.splunk.com/Documentation/Splunk/6.5.1/Troubleshooting/Enabledebuglogging#In_log.cfg

0 Karma

ddrillic
Ultra Champion

What do you really mean?

Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...