Search

Steve_Litras · ‎08-31-2011

Hi - I'm embarking on a re-organization in my splunk environment. I've come into possession of a couple big x86 boxes (4 socket, 8 core, 256GB RAM), and given that I heard multiple times that index...

tt1 · ‎02-12-2014

Hi, I have 2 virtual indexes, both return data, and both return for a specific search. But if I try and join and get no results, and if I try an 'or' I get no results. index=filea ID=2...

swagner1965 · ‎12-21-2021

We have an Enterprise Splunk instantiation that has clustered virtual indexers. We have been advised that we need real hardware for our indexers to scale up to the size we anticipate. W...

ddrillic · ‎03-30-2016

...nd the primary key on the provider table? I see https://answers.splunk.com/answers/122594/hunk-join-2-virtual-indexes.html, but I'm not clear about it...

techdiverdown · ‎05-27-2014

...6/asciiflow2014-05-26-02-45-01.csv .. Given this I am wondering about the virtual index configuration I have, listed below, is correct? I seem to search the same amount of time no mater what t...

hortonew · ‎01-21-2020

Without a virtual index enabled, running | metadata type=sourcetypes index=* will return correctly. Adding a virtual index that uses a hadoop provider, this command now fails due to the fact t...

aaron_harris · ‎06-06-2016

Is it possible to save data returned from a virtual index into another virtual index using the collect command in Splunk? Currently, if I set up a new Virtual Index to point to a blank area in H...

aelliott · ‎03-04-2014

Does this seem like a good setup for a dedicated Search head, indexer for a virtualized Splunk? Search Head - 8 core 16 GB Ram Indexer - 8 core 8 GB Ram 1 TB Hard Drive We will h...

nekb1958 · ‎02-11-2014

...plunkindex" i got "no result found". the single searches index="virtualindex" and index="splunkindex" give me records according to the indexes. Is there any possiblity to combine t...

burwell · ‎05-20-2017

In regular Splunk I can easily search for index=index1 OR index=index2 <search term> | stats count by index Then I get results from either index. When I setup a virtual index in H...

Search

Search

Search the Community

indexer sizing and virtualization

Hunk - Join 2 Virtual Indexes

Performance in Virtual versus Hardware Indexers fo...

Basic join on two virtual indexes

Creating Hunk 6.1 Virtual Index

Virtual index causing metadata command to error ou...

Is it possible to saved data returned from a virtu...

Recommended Virtual Machine Sizes for Search Head ...

search hunk virtual index and splunk index in one ...

Hunk: Searching two different virtual indexes usin...