Splunk maintenance

[teddyidc1101]

Is there maintenance procedure that Splunk Enterprise/deployment/instance requires periodically to ensure high performance?

Is there an app that can be used to this?

Please share. thanks!

[HiroshiSatoh · Accepted solution]

Is it the maintenance of "Splunk Enterprise"? Or is it a deployment server maintenance?

Splunk does not need maintenance in particular, and I think that it is enough to restart the server at regular intervals.

If you need advanced performance, please refer to the administrator's manual etc.

Capacity Planning Manual
http://docs.splunk.com/Documentation/Splunk/7.1.0/Capacity/Referencehardware

Optimize Splunk for peak performance
https://docs.splunk.com/Documentation/Splunk/7.1.0/Admin/OptimizeSplunkforpeakperformance

Splunk Sizing and Performance
https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html

[teddyidc1101]

Thanks for sharing!
To answer your question, i would say for both.

So that would mean a that if the hardware and software are performing well and being maintained on a regular basis, Splunk Enterprise will be ok already?

[HiroshiSatoh]

We monitor server monitoring, process monitoring, resource monitoring, log reception monitoring as normal operation confirmation.

[teddyidc1101]

ok thanks! this clears up things 🙂