Looking to install some new indexers wondering if by my turning Data De- Duplication at the OS level can save me some space later on with the storage.
I think it's unlikely to help save space and the effort of de-duplicating data will hamper performance.
Splunk's compressed storage format doesn't lend itself to de-duplication.
