Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Universal forwarder compression testing

$
0
0
Hi, I'm wanting to assess the improvement in network utilisation after turning on compression. Is there any query of the internal index or metrics that are collected that can allow me to assess the improvement? Also, When I configure the outputs.conf on my UF to the following: [tcpout] defaultGroup = default-autolb-group compressed = true And restarted, I expected that events would stop being indexed until I configured the inputs.conf on the indexer like this: [splunktcp://9997] connection_host = ip compressed = true But data continued to flow. Now I am worried that compression isn't actually working. How do I tell?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>