Topics

| pdf version

How Splunk Works


Splunk > The IT Search Company

  • Search and navigate IT data from applications, servers and network devices in real-time.
  • Download Splunk

Localized Splunk documentation

Looking for Splunk documentation in other languages?

64-bit operating systems

This documentation does not apply to the most recent version of Splunk.

This documentation applies to the following versions of Splunk: 3.2 , 3.2.1 , 3.2.2 , 3.2.3 , 3.2.4 , 3.2.5 , 3.2.6

64-bit operating systems

A 64-bit operating system will allow you to increase various settings in Splunk to improve performance.


  • Indexing can be improved by increasing the maximum amount of queries that a search will attempt to resolve.
  • Index size can be increased in size in 64-bit mode.

indexes.conf

maxQueryIds = <non-negative number> (10000000)The maximum number of ids a search will attempt to resolve in a single query. This is a good value for 32-bit systems. It can be raised for 64-bit installations with large amounts of RAM.
maxDataSize = <non-negative number> (750)The number of MB's db hot is allowed to grow to before it is rolled out to warm. This number should not be increased unless Splunk is running in 64-bit mode.
Revision: 207 Contact Privacy Policy Terms of Use Community content licensed under Creative Commons