Splunk Cloud Platform

Splunk data optimization

Lavender
Loves-to-Learn Everything

please suggest some splunk data optimization techniques that can be implemented in splunk cloud platform

Labels (2)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Lavender 

Are you wanting to optimize for lower disk storage, faster searching or something else? What kind of logs are you sending to Splunk Cloud? Are you on SVC or Ingest license?

This sort of task is driven by a number of these factors but also depends on the types of data you are ingesting, and where its from etc.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

PickleRick
SplunkTrust
SplunkTrust

This is such a vague question.

What do you mean? What do you want to optimize? What data do you have? What are your use cases?

Your question is a bit like "how to earn big bucks?".

And remember that often optimizing in one area (like license size) can lead to additional costs (in labour for maintenance).

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...