topic Re: Splunk 5 as VM and using Nimble Storage for shared storage in Getting Data In

Splunk 5 as VM and using Nimble Storage for shared storage

cgisplunk — Fri, 12 Jul 2013 14:01:37 GMT

Hello everyone,

Does anyone use or know anyone using Splunk 5 in this topology: 2 Splunk indexers (clustered & replicated) running as a VMware VM guest and connecting to Nimble Storage CS220G series storage via iSCSI?
Thank you.
S.

Re: Splunk 5 as VM and using Nimble Storage for shared storage

cfeskens — Wed, 03 Sep 2014 16:45:49 GMT

Did you end up attempting this? I'm considering the same setup myself, and would be curious as to your experience.

Re: Splunk 5 as VM and using Nimble Storage for shared storage

cgisplunk — Wed, 03 Sep 2014 17:01:37 GMT

Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.

Re: Splunk 5 as VM and using Nimble Storage for shared storage

cgisplunk — Wed, 03 Sep 2014 17:02:02 GMT

Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.

Re: Splunk 5 as VM and using Nimble Storage for shared storage

cfeskens — Wed, 03 Sep 2014 17:08:38 GMT

Thanks for your response. Did you attempt running an indexer on the Nimble CS at all and opt for hardware based on your experiences, or just avoid it alltogether?

Re: Splunk 5 as VM and using Nimble Storage for shared storage

cgisplunk — Wed, 03 Sep 2014 17:26:26 GMT

Opted for hardware based on Splunk PS best practices. Bare metal is still the best option for Splunk Indexers.