Getting Data In

Is there a way to test the performance of the event indexing?

VatsalJagani
SplunkTrust
SplunkTrust

How can I measure performance of Splunk about indexing events.

I want to increase MAX_TIMESTAMP_LOOKAHEAD for the event. I can directly see that doing this would decrease performance, but I want to compare the performance to something like this: if I put a higher MAX_TIMESTAMP_LOOKAHEAD , then how much performance will be degraded compared to when I keep it low?

In short, is there any way to benchmark performance of the event indexing?

0 Karma
1 Solution

VatsalJagani
SplunkTrust
SplunkTrust

After posting question I got the answer myself, which included no effort and gives very good idea about performance.
In Splunk go to Settings > Monitoring Console > Indexing > Indexing Performance: Instance

Try Monitoring Console for lot more then just indexing performance - http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview

View solution in original post

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

After posting question I got the answer myself, which included no effort and gives very good idea about performance.
In Splunk go to Settings > Monitoring Console > Indexing > Indexing Performance: Instance

Try Monitoring Console for lot more then just indexing performance - http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview

0 Karma

mstjohn_splunk
Splunk Employee
Splunk Employee

hi @VatasalJagani

I'm glad you figured out the answer to your question. Would you mind approving your answer so that others can learn from your experience?

Thanks!

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

I've accepted the answer but other answer is also nice to hear.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...