I have came across this path /apps/splunk/var/lib/splunk/kvstore/mongo. I tried to understand why this is used, but I couldn't find solution to it. Can anyone help me? Also, (excuse me if am wrong) does Splunk uses mongo db??
Splunk collections are stored in mongo db.
View solution in original post
Splunk's KVStore is based on mongodb.
thanks for the help
can you point me to a document so that i can have look at it and get an idea
hope it helps me