Refine your search:

I can see why it runs on my forwarders that are also indexing data, but why is it running on my LightWeightForwarder instances? They aren't indexing any data.

asked 19 Feb '10, 16:27

Mick's gravatar image

Mick ♦
4.0k1327
accept rate: 52%

edited 23 Apr '10, 05:34

gkanapathy's gravatar image

gkanapathy ♦
26.4k1622


2 Answers:

Yes this is completely normal. Although the LightWEightForwarder may not be indexing any of your data, it does use the index structure to keep track of the files it is monitoring and forwarding to your indexer

link

answered 19 Feb '10, 16:28

Mick's gravatar image

Mick ♦
4.0k1327
accept rate: 52%

In 4.0? I don't think there are any indexes.

(23 Apr '10, 08:02) jrodman ♦

Guys, I suppose this process is running to optimize Splunk service database called fishbucket. Don't you think so? This database is used by splunk even when LWF is enabled. Is there anybody from Splunk support or Splunk guru's to prove this statement? However this version is the same as the answer above I suppose, I've just pointed to a concrete database name.

link

answered 04 May '11, 04:05

Arseny's gravatar image

Arseny
11
accept rate: 0%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×120
×21
×9

Asked: 19 Feb '10, 16:27

Seen: 734 times

Last updated: 04 May '11, 04:05

Copyright © 2005-2012 Splunk, Inc. All rights reserved.