Knowledge Management

[SmartStore] What are the main log channels relevant for smartstore?

rbal_splunk
Splunk Employee
Splunk Employee

It will be useful to get key log channels for the smart store?What are the main log channels relevant for smartstore?

Tags (1)
0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

1)Log channels in splunkd.log

S3Client – communication with S3
StorageInterface – external storage activity (S3Client is at a lower level)
CacheManager – activity of the cache manger component
CacheManagerHandler – cache manager REST endpoint activity (both server and client side)

2)Log channels in search.log
CacheManagerHandler – bucket operations with cache manger REST endpoint
S2BucketCache – search time bucket mangement (open/close etc)
BatchSearch, CursoredSearch, IndexScopedSearch, ISearchOperator – for search activity wrt to buckets

3)audit.log
Contains bucket activity, such as upload/download/evict etc

4)metrics.log
Contains metrics around operations on external storage

5)splunkd_access.log
Contains a trail of the search process activity against the cache manger REST endpoints

gjanders
SplunkTrust
SplunkTrust

Does the job inspector have additional metrics when buckets are pulled from a SmartStore cache?

Alerts for Splunk Admins https://splunkbase.splunk.com/app/3796/
Version Control for Splunk https://splunkbase.splunk.com/app/4355/
0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!