Splunk Search

what format are raw logs stored in the Indexer ?

damode
Motivator

In addition to the main question,
Client wants to install Splunk in non-default partition (i.e not the default Splunk drive (C:)) and
also wants to store all indexes in other partition (E:)
It's on a Windows Server

I know that the above is possible but I would just like to know if there are any things I should keep in mind before doing that. If that would affect in the way Splunk operates

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...