SPLK-2002(205Q) · Question #104
An index has large text log entries with many unique terms in the raw data. Other than the raw data, which index components will take the most space?
The correct answer is A. Index files (*. tsidx files). Index files (. tsidx files) are the main components of an index that store the raw data and the inverted index of terms. They take the most space in an index, especially if the raw data has many unique terms that increase the size of the inverted index. Bloom filters, source…
Question
An index has large text log entries with many unique terms in the raw data. Other than the raw data, which index components will take the most space?
Options
- AIndex files (*. tsidx files).
- BBloom filters (bloomfilter files).
- CIndex source metadata (sources.data files).
- DIndex sourcetype metadata (SourceTypes. data files).
How the community answered
(38 responses)- A71% (27)
- B8% (3)
- C16% (6)
- D5% (2)
Explanation
Index files (. tsidx files) are the main components of an index that store the raw data and the inverted index of terms. They take the most space in an index, especially if the raw data has many unique terms that increase the size of the inverted index. Bloom filters, source metadata, and sourcetype metadata are much smaller in comparison and do not depend on the number of unique terms in the How the indexer stores indexes Splunk Enterprise Certified Architect Study Guide, page 17
Topics
Community Discussion
No community discussion yet for this question.