Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Setting up volumes for splunk deployment

$
0
0
OK basically I think im confusing myself. Ive a helm deployment on K8 and orig had volumes for etc and var. I want to have seperate volumes for hotwarm, cold, frozen and thawed. I created some PVC/vollumes for each e.g. mapping to var/cold,var/hot etc but is this correct? I know in index.conf you set paths e.g. per index, but can this be .... var/hotwarm/index1/ ? Is it ok to have 3-4 vols for each of the temps and put the indexes on each, or do i need a vollume per index ??? im just getting confused. Any help appreciated. Im also guestimating sizes of vollumes - currently we dont use splunk much, but its going to grow rappidly I suspect!! E.g. my helm script includes this ..... volumeMounts: - name: splunk-etc mountPath: /opt/splunk/etc - name: splunk-var mountPath: /opt/splunk/var - name: splunk-var-hotwarm mountPath: /opt/splunk/var/log/splunk/hotwarm - name: splunk-var-cold mountPath: /opt/splunk/var/log/splunk/cold - name: splunk-var-frozen mountPath: /opt/splunk/var/log/splunk/frozen

Viewing all articles
Browse latest Browse all 47296

Trending Articles