Building for the Splunk Platform

How does it affect the performance of the Splunk instance when we index more than 10 million data?

Ashwini008
Contributor

Hi,

My requirement is i need to pull more than 10 million data from database and index in splunk.

I want to understand, if this badly affects the performance of the stack, will there be any infrastructure related issues.

How can we index such huge volume of data safely into Splunk?

Labels (1)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

It's totally depends on your Splunk and other environments is this operation heavy to splunk or not. If you have properly configured systems and those are enough powerful and your time schedule for indexing is enough, then you shouldn't have any issues with that data amount.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...