Splunk Enterprise

separate nfs mounts for frozen vs. one NFS mount for multiple indexers

jcgever
Explorer

We are moving to a new storage array for our frozen data. Our old array is setup where our indexers have separate nfs mounts for the frozen data. Would there be an issue of having 5 indexers pointing to separate folders on one NFS mount or would it be best for each indexer to have separate NFS mounts for their frozen storage?

Labels (2)
Tags (2)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @jcgever,

Since Splunk will just copy frozen buckets, there will be no issue.

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...