Number of seconds after which indexed data rolls to frozen. This is a global setting, not a per index setting. If no index destination information is available in the input data, the index shown here is the destination of such data. The total incudes data in the home, cold and thawed paths. Total size, in MB, of data stored in the index. Splunk software automatically puts frozen buckets in this directory. Used as an alternative to a coldToFrozenScript. This is a global setting, not a per index setting.įilepath to the cold databases for the index.ĭestination path for the frozen archive. The index that stores block signatures of events. If this is set to 0, block signing is disabled for this index. This is a global setting, not a per index setting.Ĭontrols How many events make up a block for block signatures. If enabled (set to True), degrades indexing performance. Indicates whether all data retreived from the index is proper UTF8. This can be beneficial for optimizing resource allocation and planning future data management strategies. Examples Basic infoĭiscover the segments that have the most events based on their maximum time, useful for identifying trends and high-activity periods within your data. Utilize it to uncover information about indexes, such as their current size, maximum size, home path, and more. ![]() As a Splunk administrator or a security analyst, explore index-specific details through this table, including data storage, retention policies, and associated metadata. The splunk_index table provides insights into indexed data within Splunk. Indexes are used in Splunk to maintain the data, with its own set of configuration options that control its behavior. In Splunk, an Index is a place where Splunk stores the data. Splunk is a software platform widely used for monitoring, searching, analyzing and visualizing the machine-generated data. ![]() ![]() Table: splunk_index - Query Splunk Indexes using SQL
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |