Getting Data In

What Linux filesystem and fs options are people using for Splunk indexers?


Good morning. I am wondering what filesystem and fs options people are using for spunk indexers? I am running it on CentOS and have chosen xfs for my 4TB filesystems. We expect to have a lot of indexes, so I was wondering what recommendation people may have on this. I cannot imagine that the default fs setup is the best option, but maybe.

Any feedback is much appreciated.

0 Karma


Most of the time I see ext4, however, I've also seen xfs used for indexes without issue. I personally haven't witnessed a huge efficiency gain of one over the other.

0 Karma