Hello, I was trying to find out the correlation among Indexed Fields, Indexed Time Field Extraction, HF/UF, Deployment Server, and Performance. Do we need to have Indexed Time Field Extraction to c...
...Ms
We are concentrating only on performance for phase 1. In phase 2 we will be providing indexer replication.
My hardware recommendation for phase 1 is:
Deployment Server:
Count - 1
H...
In my indexer cluster, on the MC under "Indexing>Performance>IndexingPerformance: Deployment" I'm noticing that some about half of my indexers show close to 100% across queues (from parsing t...
I need details about what to validate after the upgrade so I know it was successful. How can I tell that everything got upgraded correctly, and that the system is healthy and ready to go?
Early on in our Splunk deployment we set ANNOTATE_PUNCT to false on our indexers, both to save space and for performance tuning. Fast forward a few years and uor indexing set up now has some spare r...
I'm planning to introduce index parallelization into our Splunk deployment given the additional resources we have on our indexers. In looking at the DMC, specifically under IndexingPerformance, I d...
Im currently indexing large amount of data and monitoring the process and usage from the Deployment Monitor.
For some reason the Deployment Monitor is marking the current status of the indexing a...