Saved Bookmarks
| 1. |
Explain what is a fish bucket and fish bucket index. |
|
Answer» Essentially, Splunk Fishbucket is a subdirectory within Splunk that is used to monitor and track the EXTENT to which the content of a file has been INDEXED within Splunk. For this feature, there are two types of contents: SEEK POINTERS and CRCs (cyclic redundancy checks). The default location of the FISH bucket subdirectory is: /opt/splunk/var/lib/splunk. You can find it through the GUI (Graphical User Interface) by searching for: index=_thefishbucket. |
|