Getting Data In

Is setting up bloom filters still recommended in Splunk 6.2.3?

daniel333
Builder

hello,

Is setting up Bloom Filters still recommended under 6.23? I am hearing conflicting statements about if they should still be setup and if they actually drive value.

Tags (2)

ChrisG
Splunk Employee
Splunk Employee

It depends on what kind of searches you are doing. Bloom filters are most effective at improving performance for rare term searches. Can you say more about what your use cases are, and maybe provide some sample data and searches? That will help the community answer your question better. It's not a simple yes/no on/off question.

Here is the documentation topic, if you have not already seen it.

There has been no change to bloom filters in Splunk Enterprise 6.2.3.

daniel333
Builder

Is there any good reason to turn them off?

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...