I am going to monitor file change on several servers,but I don't like the way of sharing directory .so I installed a sync software on these servers. When there is a file change,The change file was sync to a server for central management.And i use splunk to monitor the single server.After some time, i found that the index volume was overhead:the files was about 50M in total,but the index volume is 5G in a day.
the files name did not change during the sync process.but everytime the sync process delete
the oldfile and create a new file with the same name? Is this the reason of index overhead?
... View more