Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below
Splunk Enterprise on Dell PowerFlex rack using PowerScale
Revisions Acknowledgements Executive summary Introduction Product overview Splunk distributed clustered deployment Validation
Validation
Validation procedure
Conclusion Appendix A Appendix B: Technical support and resources

Validation procedure

Validation procedure

  • To validate the data aging and searching on PowerFlex rack, following steps have been performed:

    1. Generated 50 GB of log data and forwarded it using universal forwarder to Splunk cluster. The following figure illustrates the size of the log data:

    1. Data is moved to indexer from the universal forwarder. The processed data is stored in the hot bucket path of indexer/data/splunk/homedb as shown in the following figure:

    1. Validated the indexer events present in the indexer by running a search query on hot bucket data using search head (GUI) as shown in the following figure:

    1. After 30-days hot/warm retention, observed that data moved from warm bucket to cold bucket path /data/splunk/isilon_colddb as shown in the following figure:

    The cold bucket path /data/splunk/isilon_colddb is mounted to Indexer VM using PowerScale NFS. For more information about PowerScale NFS configuration, see Configure PowerScale NFS for the PowerFlex.