Hello,
i can activate compression on the universal forwarder to the indexer. as i understand from the documentation and some answers entries the compression is different between ssl encryption a...
Dear SPLUNK Community,
I have around 150 UF, 2 HF and 4 Indexers.
I intend to auto load balance data from UF->HF and also HF->Indexer.
Is it fine to connect 150 UFs to 2 HFs? Do I nee...
the Scenario like this: I want to pick up 5% minimum value from thousands of data, Example: 1,2,3 ,4 5,6,7,8,9,10 I want pickup minimum 30%, i.e (1,2,3) will be ...
Hi all,
We are currently estimating our network bandwidth needs and one of the questions we are trying to answer is about compression ratios for index replication.
So let's assume all our d...
...XCEEDED/REQUEST)*100),1)
and I want to time chart the ratio by this three coloums/dimensions Model, osVersion, firmware.
Can someone assist me please?
...nd display these ratios by hour. The name values are dynamic and unknown at query time. I can get halfway there, using a dynamic eval field name, like this: index=SOME_INDEX sourcetype=S...