/apps/splunk/var/lib/splunk/kvstore/mongo - Why is this used?

[saifuddin9122]

Hi,

I have came across this path /apps/splunk/var/lib/splunk/kvstore/mongo. I tried to understand why this is used, but I couldn't find solution to it. Can anyone help me? Also, (excuse me if am wrong) does Splunk uses mongo db??

[esix_splunk]

Splunk's KVStore is based on mongodb.

[richgalloway · Accepted solution]

Splunk collections are stored in mongo db.

[saifuddin9122]

thanks for the help

can you point me to a document so that i can have look at it and get an idea

[esix_splunk]

http://docs.splunk.com/Documentation/Splunk/6.4.1/Admin/AboutKVstore

[saifuddin9122]

Thanks again

hope it helps me