Appropriate segmentation for data.

[thirumalreddyb]

Hi, I'm struck with a question. I have 3 GB of data coming in every day. I'm not sure which segmentation to follow. I'm preferring Full Segmentation by default. Could someone please tell me the pros and cons of the same.

[_d_ · Accepted solution]

You can read about segmentation and its impact on storage and search here:

http://wiki.splunk.com/Community:Segmentation

[sowings]

And it's not something I've ever seen tuned. 3GB / day is not typically considered a "heavy" indexing load, so it's probably OK to leave the segmentation as-is.