How does the cluster command work?

Splunk Search

hi how exactly cluster commad work?

I have lots of unstructured data that has different key and value, how splunk detect and cluster these lines?

What happen behind scene?

Any idea?

Thanks

Get Updates on the Splunk Community!

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Join the Conversation