I'm seeing the following exception in search.log (in the Hunk search head) when I have snappy compressed (.snappy) files in my virtual index directory
SplunkMR$SearchHandler$1 - native snappy l...
Does Hadoop Connect support snappy compressed file (on HDFS) for Indexing?
All it needs is, to use -text while reading and indexing the file. Without this, it appears like Splunk will be indexing g...
...47879/why-hunks-field-extractor-behaves-differently-in-smart-mode-vs-fast-mode.html) but I cannot get mine to work.
we are using log files generated by spark: they are snappy compressed with the n...
The vector Splunk_hec_log [1] support compression algorithms gzip,snappy,zlib and zstd. It seems the server splunk HEC only supports gzip(I am using docker.io/splunk/splunk 9.2...
....NativeCodeLoader.buildSupportsSnappy(Native Method)
09-08-2014 19:28:25.530 INFO ERP.MyHadoopProvider - at org.apache.hadoop.io.compress.SnappyCodec.checkNativeCodeLoaded(SnappyCodec.java:62)
09-08-2...
Hi everyone,
I'm already able to get with hunk via hive some text files, and orc tables, but the table I'm now trying to reach is orc, compressed in snappy.
When I make a search, the web i...
We have a pretty large (?) environment that we just upgraded from 5.0.5 to 6.0.2 and would anecdotally say 6 isn't quite as snappy as 5. In this context I'm saying snappy in terms of quickness to r...
Hi all,
I have a few files (containing syslog events) in my Hadoop HDFS compressed using Snappy, and I configured Splunk to read that data using the virtual indexes.
Without compression, the e...
Given the option of compressing files using the above technologies which would be the best practise for use with Splunk Analytics for Hadoop (Hunk)?
From my own research I'm leaning towards snappy...
Splunk = Hunk 6.2.8 and Hunk 6.3.3
Hadoop = HDP 2.3.x
Symptoms = Searches don't return some results. On an example data set (JSON files compressed with snappy) it was observed that tiny s...