Refine your search:

What is Splunk database engine?

Is it PostgreSQL?

asked 06 Sep '10, 11:45

donnylie's gravatar image

donnylie
69227
accept rate: 0%

edited 06 Sep '10, 14:23

gkanapathy's gravatar image

gkanapathy ♦
38.3k81229


3 Answers:

Hi there,

Splunk does not use arealtional database to store events and indexes.

The storage is all flat file based.

Please have a look here:

http://www.splunk.com/base/Documentation/4.1.4/Admin/WhatsaSplunkindex

Hope that answers your question?

Cheers,

simuvid

link

answered 06 Sep '10, 12:44

simuvid's gravatar image

simuvid
2571314
accept rate: 25%

is it mean, Splunk develop its own system to do this from ZERO? And it is really does not have any kind direct/significant relation to other DB technology?

link

answered 14 Sep '10, 04:27

donnylie's gravatar image

donnylie
69227
accept rate: 0%

2

Yes, Splunk developed their own on-disk storage format from "zero". (If you call having a C++ compiler and standard libraries "zero") From an architecture perspective, there are large differences between an ACID-capable generalized RDBMS and (essentially) a search engine's data storage. Splunk does not have (and does not need) many of the features a relational DB has. Also, most relational DB's full-text search are ugly side-additions. The Splunk developers were able to make an on-disk data format that meets their needs exactly.

(19 Oct '11, 07:04) dwaddle ♦

I think Splunk might be using Lucene as a backend seach engine, though I am not sure, and looking for a confirmation.

link

answered 07 Jan, 03:19

sambhav's gravatar image

sambhav
211
accept rate: 0%

2

No. Splunk uses its own proprietary storage/db.

(07 Jan, 03:42) Ayn ♦
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×762
×128

Asked: 06 Sep '10, 11:45

Seen: 8,221 times

Last updated: 07 Jan, 03:42

Copyright © 2005-2014 Splunk Inc. All rights reserved.