Hi,
I'm wanting to assess the improvement in network utilization after turning on compression. Is there any search of the internal index or metrics that are collected that can allow me to assess the improvement?
Also, when I configure the outputs.conf on my Universal Forwarder to the following:
[tcpout]
defaultGroup = default-autolb-group
compressed = true
and restarted, I expected that events would stop being indexed until I configured the inputs.conf on the indexer like this:
[splunktcp://9997]
connection_host = ip
compressed = true
But data continued to flow. Now I am worried that compression isn't actually working. How do I tell?
↧