Monitoring Splunk

Tuning for performance

halbeisendv
Path Finder

While the Splunk documentation serves us well, I am interested in finding a resource for studying about performance. I have not been successful in locating commercial documentation. Thank you.

Tags (1)
0 Karma
1 Solution

gjanders
SplunkTrust
SplunkTrust

I published a conf talk related to this topic, my talk was more around the "Things I wish I knew then" wiki articles:
How’d You Get So Big? Tips & Tricks for Growing Your Splunk Deployment from 50 GB/Day to 1 TB/Day or recording here

In addition these other talks were excellent resources in addition to the above post:
The Jiffy Lube Quick Tune-­‐up For Your Splunk Environment

Also refer to the 2017 conf presentations around Splunk internals and scaling, in particular talks like Worst Practices...and How to Fix Them, the talks on Indexer scaling or 5 million buckets and beyond et cetera, there are many useful talks or documentation around this.

This is all in addition to the capacity planning manual

View solution in original post

halbeisendv
Path Finder

A great deal of information in this thread; will be working threw it over the next several weeks. Thanks so much.

0 Karma

gjanders
SplunkTrust
SplunkTrust

I published a conf talk related to this topic, my talk was more around the "Things I wish I knew then" wiki articles:
How’d You Get So Big? Tips & Tricks for Growing Your Splunk Deployment from 50 GB/Day to 1 TB/Day or recording here

In addition these other talks were excellent resources in addition to the above post:
The Jiffy Lube Quick Tune-­‐up For Your Splunk Environment

Also refer to the 2017 conf presentations around Splunk internals and scaling, in particular talks like Worst Practices...and How to Fix Them, the talks on Indexer scaling or 5 million buckets and beyond et cetera, there are many useful talks or documentation around this.

This is all in addition to the capacity planning manual

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...