Splunk Tech Talks
Deep-dives for technical practitioners.

Spend Less and Get More Out of Splunk with SmartStore

Splunk Employee
Splunk Employee

View our Tech Talk: Platform Edition, Spend Less and Get More Out of Splunk with SmartStore

Are you managing Splunk and concerned about rising infrastructure costs as you scale your use? If you want to make your infrastructure investments work harder for you, this Tech Talk is for you. Join our Splunk Tech Talk on the Splunk SmartStore that allows you to decouple compute and storage and take advantage of external data storage solutions like S3 and S3 API compliant object stores.

Tune in to:

  • Learn how to make the most of your infrastructure investments with Splunk 
  • Engage in a live demonstration of how to manage your Splunk environment with SmartStore
  • Get access to the latest resources on SmartStore in Splunk
Splunk Employee
Splunk Employee

Here is the Q&A from the live session.

Q: Say I run a search, but the data is not in cache. So it downloads from the S3. But wouldn't downloading take extra time and slow my search?
A: Yes, if not in your cache there could be a time delay. If you have frequent need to run rare searches, SmartStore might not be appropriate for your purposes, as rare searches can require the indexer to copy large amounts of data from remote to local storage, causing a performance impact. This is particularly the case with searches that cover long timespans. If, however, the searches are across recent data and thus the necessary buckets are already in the cache, then there is no performance impact.
 
Q: Are there plans to integrate SmartStore with Azure?
A: Sounds like there are plans for it to be part of the roadmap, but the timeline is currently TBD.
 
 
Splunk Employee
Splunk Employee

Here are additional resources to continue on your journey.

 

Training and Certification : Explore trainer led sessions for the Admin on how to implement Splunk Smartstore

SmartStore Documentation: Get step by step guidance with Splunk docs

Explore .conf materials online

Explore Partner SmartStore Offerings

SmartStore Tag  on Community.splunk.com