Splunk Enterprise

Is there any official documentation about Mongo DB in KV Store?

WildHuckleberry
Path Finder

Hello Splunkers!

 

In my knowledge, mono db is only for the internal uses and able to access with internal Splunk SPL. 

 

Is there any official documentation about this?

 

Thank you in advance.

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The Splunk KVstore feature is implemented using mongoDB.  This is mostly transparent, however.

The KVstore is not just for internal use.  Any Splunk app/search can use the KVstore.

The KVstore is documented in the Admin Manual at https://docs.splunk.com/Documentation/Splunk/8.2.5/Admin/AboutKVstore

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The Splunk KVstore feature is implemented using mongoDB.  This is mostly transparent, however.

The KVstore is not just for internal use.  Any Splunk app/search can use the KVstore.

The KVstore is documented in the Admin Manual at https://docs.splunk.com/Documentation/Splunk/8.2.5/Admin/AboutKVstore

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...