How does the cluster command work?

Splunk Search

hi how exactly cluster commad work?

I have lots of unstructured data that has different key and value, how splunk detect and cluster these lines?

What happen behind scene?

Any idea?

Thanks

Get Updates on the Splunk Community!

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...

Join the Conversation