Getting Data In

What is the default compression method in the outputs.conf file

legaldan
Explorer

In outputs.conf you can configure compressed = <boolean> to compress the data, but the documentation doesn't specify how the compression is done。

 

There is also no parameter specifying the compression method.

 

So my question is what compression is used by default, and whether there is any documentation on it to show that

Labels (1)
Tags (1)
0 Karma

Manojbh_splunk
Loves-to-Learn

TCP has it's own compression standards same is applied here.

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Just like the Splunk protocol is undocumented, so too is the compression method.  It may be a standard compression method or it may be proprietary like the protocol itself.

Splunk recommends using the compression available in SSL.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...