All Apps and Add-ons

Hashing method for initCrc

RicoSuave
Builder

What is the method that splunkd uses to hash the first 256 bytes of a file that is being monitored?

1 Solution

yannK
Splunk Employee
Splunk Employee

a bit of magic.
http://en.wikipedia.org/wiki/Computation_of_CRC

Remarks about CRC options.

  • You can add the source to the calculation (crcSalt= with SOURCE in caps in inputs.conf)
  • and since Splunk 5.0 you can setup a longer CRC (initCrcLength in inputs.conf)

View solution in original post

yannK
Splunk Employee
Splunk Employee

a bit of magic.
http://en.wikipedia.org/wiki/Computation_of_CRC

Remarks about CRC options.

  • You can add the source to the calculation (crcSalt= with SOURCE in caps in inputs.conf)
  • and since Splunk 5.0 you can setup a longer CRC (initCrcLength in inputs.conf)

RicoSuave
Builder

Really i'm just curious.

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...