Getting Data In

store collected syslog data on NFS

Motivator

Hi,

i would like to run a splunk instance on a unix box. This splunk should receive syslog messages. How do i set up that splunk should store the received data (not the index) on a path that is on a NFS share?

Reason: the box where splunk runs is for the service/search head whereas the storage is on a very different device with lots of space.

Tags (2)
0 Karma
1 Solution

SplunkTrust
SplunkTrust

Splunk Employee
Splunk Employee

In general, I would not recommend nfs as a filesystem to store indexed data on except in very specific circumstances. For hot and warm data, the risk of corruption exceeds my threshold for comfort.

http://splunk-base.splunk.com/answers/250/can-splunk-read-data-to-index-off-an-nfs-mount-can-splunk-...

0 Karma

SplunkTrust
SplunkTrust

Motivator

Saw it too late but yeah, fits the bill. Thank you anyway.

0 Karma