Splunk Enterprise

Using Time Series Indexes

shocko
Contributor

We recently upgraded from Splunk Enterprise 6.1.4 to 8.0.5. We collect quite a bit of Windows Performance counters.  I see that time series indexes are available as per this. Being a Splunk part-timer I'd assume it's a no brainier to start using these for performance counter collection? Seems like that's the entire reason they were brought into the product? Do they save on license count?

 

PS: Obviously I might have to modify a few dashboards and queries but I'm OK with that. 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...