Knowledge Management

[SmartStore] What are the main log channels relevant for smartstore?

rbal_splunk
Splunk Employee
Splunk Employee

It will be useful to get key log channels for the smart store?What are the main log channels relevant for smartstore?

Tags (1)
0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

1)Log channels in splunkd.log

S3Client – communication with S3
StorageInterface – external storage activity (S3Client is at a lower level)
CacheManager – activity of the cache manger component
CacheManagerHandler – cache manager REST endpoint activity (both server and client side)

2)Log channels in search.log
CacheManagerHandler – bucket operations with cache manger REST endpoint
S2BucketCache – search time bucket mangement (open/close etc)
BatchSearch, CursoredSearch, IndexScopedSearch, ISearchOperator – for search activity wrt to buckets

3)audit.log
Contains bucket activity, such as upload/download/evict etc

4)metrics.log
Contains metrics around operations on external storage

5)splunkd_access.log
Contains a trail of the search process activity against the cache manger REST endpoints

gjanders
SplunkTrust
SplunkTrust

Does the job inspector have additional metrics when buckets are pulled from a SmartStore cache?

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...