Splunk Dev

With too much data, is it advisable to extract data from hive tables rather than Splunk indexes?

snehaw
New Member

With too much data, is it advisable to start extracting data from hive tables rather than Splunk indexes? Does anybody have any examples or documentation or examples around this?

Tags (2)
0 Karma

mstjohn_splunk
Splunk Employee
Splunk Employee

hi @snehaw,

Thanks for posting. However, could you provide more info about this problem? Not only will that give you a greater chance of having your question answered, it will also help us categorize the issue so others with similar problems can learn from it.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...