QuestionQ56

Configuration Problems

After Splunk is installed, where are its internal indexes stored by default?

  • A SPLUNK_HOME/bin
  • B SPLUNK_HOME/var/lib
  • C SPLUNK_HOME/var/run
  • D SPLUNK_HOME/etc/system/default
Explanation

Splunk index directories, including the preconfigured internal indexes, are stored by default under $SPLUNK_HOME/var/lib/splunk; therefore, the matching parent directory is SPLUNK_HOME/var/lib.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!