I'd like to bring in about 26 million events into Splunk using DB Connect and I was thinking Batch Input would be best to start with. It's for historical purposes and will only be done once and we'll move to rising column after the first index.
If Max Rows to Retrieve = 1000000 and Fetch Size = 10000 , does Splunk keep pulling in the same rows? Or does it pick up new ones until all of the rows are pulled in?
... View more