QuestionQ134

Infrastructure Planning: Index Design

When Splunk indexes data in a non-clustered environment, what types of files does it create by default?

  • A Index and .tsidx files.
  • B Rawdata and index files.
  • C Compressed and .tsidx files.
  • D Compressed and meta data files.
Explanation

Splunk stores processed event data in compressed rawdata journals and creates .tsidx time-series index files to support efficient searching. These are the principal file types created in index buckets.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!