Splunk Certified Study Guide: Prepare for the User, Power User, and Enterprise Admin Certifications

© Deep Mehta 2021

D. MehtaSplunk Certified Study Guidehttps://doi.org/10.1007/978-1-4842-6669-4_16

16. Advanced Splunk

Deep Mehta¹  

(1)

Printserv, Mumbai, India

 

In this chapter, you learn about managing indexes, configuring custom indexes, removing indexes, and configuring index parallelization. You see how to move the index database, configure maximum index size, and set limits for disk usage. You learn how to configure nodes in an offline state, enable maintenance mode, perform a rolling restart, remove bucket copy, and remove peer nodes. You learn what to do if the master site fails. You go through REST API endpoint capabilities in Splunk and look at the Splunk SDK.

This chapter covers the following topics.

• Managing indexes

• Managing index storage ...