Does anyone have any good resources about indexes and index management?
Before I set up a bunch of indexes, I'd like to know more about the how indexes impact my deployment.
Hey,
I noticed a problem on my clustered environment, when the SH could not search over 2 new peers I’ve added to the cluster earlier.
When trying to search over the new peers’ ‘_internal’ l...
I have a 5GB license in my Splunk, but abruptly on a single day, 24GB logs got indexed. After that, search heads became very slow. I have indexer clustering in my Splunk setup (3 peers 7 1 master)....
Hi, I have a difference between 2 searchpeers, both members of my indexer cluster, for the time to Reap Knowledge Bundle Directory. The average of the first one is about 2~3s whereas the second o...
What factors should be taken into consideration in deciding the appropriate number of replicationThreads? Are there any performance considerations for increasing this value?
...essage {** “Gave up waiting for the captain to establish a common bundle version across all searchpeers; using most recent bundles on all peers instead** is displayed. Also for Non-Captain SHC member when t...
i am about to define hardware configuration for setting up splunk cluster on AWS.
I know peer nodes have to be high I/O, and data resides on peer nodes so ebs size should be enough to handle r...
Hi
I am running a heavy forwarder with HEC and it is sending data to 3 indexers. I am starting to read about ways to optimise this configuration, but I am not sure if I have all the settings...