Splunk Enterprise

Is it possible to do KV store migration one server at a time over multiple days?

afolabia
Path Finder

I'm in a RHEL8, Splunk 8.2.6 distributed environment with single kvstore on each servers. Can Memory Mapped (MMAP) storage engine and WiredTiger storage engine exist in the same Splunk environment but on different servers in single instance? I will like to do the migration but one server at a time over multiple days.

Labels (1)
0 Karma

schose
Builder

Hi,

Can you be more precise what at your splunk environment looks like? If you mean you are running multiple single search head instances there is no communication between the kvstores and migrating vom mmap to wiredtiger one-by-one shouldn't be any issue. 

if you are kvstore heavily or big dataset try performance in a test environment. We have seen increases in search time up to 3x. 

best regards,

Andreas 

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...