Does anyone know what the read/write block size is (ex. 4KB, 8KB, 16KB, etc) that the Splunk application uses to write data?
Block size is determined by the OS/filesystem, not the app.
so you are saying Splunk uses whatever block size the OS/Filesystem dictates?