...disks and
partitionsfor its indexdata. It's
possible to configure Splunk to use
many disks/partitions/filesystems on
the basis of multipleindexes and
bucket types, so long as you m...
Im looking to take advantage of faster disks for specific index's. Would there be any issues if I setup my index cluster with two separate hot storage partitions?
For example I want index "A" h...
...ite2/bkp indexer, those backup1 & backup2 correspond to each of the NFS partitions enabling me to share my indexes into the different NFS partitionsfor backup.
The search heads use site-affinity t...
I am not sure how to configure the indexes.conf AND the splunk-launch.conf. I understand multiple volumes in indexes.conf, such as:
[volume:hotwarm]
path = /splunkindexes/hot
[v...
Is it possible to use the collect function to send data to multiple different summary indexes? For example, let's say my search produces the following results:
date org f...
Hi!
I know there are several questions in this topic, but I didn't find a solution for me.
I try to create a simple lab splunk system with 1 HF and 2 indexers (ix1, ix2). HF has 2 input udp://1...
...uckets from multipleindexers and treats them as live data. The idea is that users can log in to the archive instance to search across very old data without having to restore it first.
In either case, w...
I've written a script that polls a WebApi and after receiving the response streams the data into Splunk to be indexed . The response that is intended to be indexed is a large Json Object with more t...
index=index1 | stats sum(feild1) as totalAmount1
index=index 2| stats sum(feild2) as totalAmount2
index=index 3| stats sum(feild3) as totalAmount3
I need to display data from above 3 s...