The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Previous Topic: Splunk-2-Splunk Free Version | Next Topic: forcing roll from warm-->cold?
Posts 1–2 of 2
Hello,
Got a few questions on indexed data.
1. Does syslog data count towards the 500mb maximum indexed data for the free version/
2. What does splunk use a database?
3. Can it utlize an external Oracle db?
4. Does the local data get rotate and can that be configured?
Hi,
1. Yes, it does.
2. It's own proprietary data store.
3. No.
4. Yes, it does. Details can be found at http://www.splunk.com/base/Documentation/latest/Admin/SetARetirementAndArchivingPolicy also recommended is http://www.splunk.com/base/Deploy:UnderstandingBuckets