Getting Data In

Is there a way to test the performance of the event indexing?

Motivator

How can I measure performance of Splunk about indexing events.

I want to increase MAX_TIMESTAMP_LOOKAHEAD for the event. I can directly see that doing this would decrease performance, but I want to compare the performance to something like this: if I put a higher MAX_TIMESTAMP_LOOKAHEAD , then how much performance will be degraded compared to when I keep it low?

In short, is there any way to benchmark performance of the event indexing?

0 Karma
1 Solution

Motivator

After posting question I got the answer myself, which included no effort and gives very good idea about performance.
In Splunk go to Settings > Monitoring Console > Indexing > Indexing Performance: Instance

Try Monitoring Console for lot more then just indexing performance - http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview

View solution in original post

0 Karma

Motivator

After posting question I got the answer myself, which included no effort and gives very good idea about performance.
In Splunk go to Settings > Monitoring Console > Indexing > Indexing Performance: Instance

Try Monitoring Console for lot more then just indexing performance - http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

hi @VatasalJagani

I'm glad you figured out the answer to your question. Would you mind approving your answer so that others can learn from your experience?

Thanks!

0 Karma

Motivator

I've accepted the answer but other answer is also nice to hear.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!