Installation

Estimating storage requirements on a windows server

Scott
Engager

In the installation manual it shows how once you have indexed some data by using the "du -shc hot_v*/rawdata" command you are able to determine how large the compressed persisted raw data is. What is the equivalent command on a windows server?

Tags (1)

gkanapathy
Splunk Employee
Splunk Employee

Windows does not come with a command line tool for this. However, you can either simply select the relevant directories in Windows Explorer, right-click, and choose "Properties", or you can download and use the SysInternals du tool from: http://technet.microsoft.com/en-us/sysinternals/bb896651.aspx and run

for /d %i in (hot_v*) do du.exe -q "%i\rawdata"
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...