Hi , In our current Splunk infrastructure , indexes are enabled with smart store and indexers are clustered. Now our local storage is almost 80% full. When further validating ,i n...
Hi We have a stand alone environment in which daily 100 GB data will be ingested, just want to know what would be the best indexstorageconfiguration in indexes.conf. i have no. o...
...o Splunk, so I may be asking the wrong question to begin with)
How can I configure my splunk setup with an index on shared storage to handle dynamic load-balancing between two indexers?
My u...
...ore storage I would like to set coldPath.maxDataSizeMB since looks like we have some issue with deleting the cold buckets Does it make sense to set coldPath.maxDataSizeMB...
Hi All,
We have a certain configuration for deployment which Includes an old storage which supports only CIFS UNC path.
My Question is:
What are the the consequences of defining the Index D...
My current Splunk architecture plan is to have a combo search head and deployment server along with 2 indexers clustered together. What would be the best way to configureindexstorage? 1) Per u...
...hould I split the storage up evenly by creating indexa and indexb on both servers, and set a max size of 375 GB on each (750GB/2)? Are there any caveats as we add more indexes or more search nodes? D...
...ntel Xeon 6148 and 96GB RAM each) SF=2, RF=2 Site 02 3 Indexers (dedicated VM with 2x20 physical core CPU Intel Xeon 6148 and 96GB RAM each) SF=2, RF=2 Search Heads are configured with site a...
...ollowing folders, with test1 as the index name:
/data/hot/test1
/data/cold/test1
The fast volume has a mountpoint of /data/hot and large storage as /data/cold.
I've added "SPLUNK_DB=/data" in the /e...