I've got a entirely Windows based Splunk environment, 2 indexers and 2 search heads at the minute for redundancy.
I'm wanting to configure search head pooling to use a NAS box with SAMBA shares for the storage of the pool. Configuring the pool to use the share \nas\splunk_pool works, as does creating the users and using apps.
Search performance though is terrible, even if I move the share to the local box and use that, removing any network issue.
Anyone seen this before?
... View more