Advanced Splunk
摘要
In this chapter, you learn about managing indexes, configuring custom indexes, removing indexes, and configuring index parallelization. You see how to configure the maximum index size and set limits for disk usage. You learn how to configure peer nodes in an offline state, enable maintenance mode, perform a rolling restart, remove bucket copy, and remove peer nodes. You learn what to do if the manager site fails. You go through REST API endpoint capabilities in Splunk and look at the Splunk SDK.