topic Re: Which is better: building a heavy forwarder in Azure or using the Azure Marketplace BYOL option? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445982#M77566 <P>What is the capacity/Azure SKU you would suggest for an environment that would be forwarding 10 TB of data per day? I see per Splunk Documentation, for large scale deployment, they recommend to use Standard_D15_v2 - 5 instances indexing 1 TB of data with search load from 8 concurrent users.</P> <P><A href="https://www.splunk.com/pdfs/technical-briefs/deploying-splunk-enterprise-on-microsoft-azure.pdf" target="_blank">https://www.splunk.com/pdfs/technical-briefs/deploying-splunk-enterprise-on-microsoft-azure.pdf</A></P> <P><A href="https://docs.microsoft.com/en-us/azure/virtual-machines/dv2-dsv2-series-memory?toc=/azure/virtual-machines/linux/toc.json&amp;bc=/azure/virtual-machines/linux/breadcrumb/toc.json" target="_blank">https://docs.microsoft.com/en-us/azure/virtual-machines/dv2-dsv2-series-memory?toc=/azure/virtual-machines/linux/toc.json&amp;bc=/azure/virtual-machines/linux/breadcrumb/toc.json</A></P> Wed, 30 Sep 2020 05:14:13 GMT sarnathkj 2020-09-30T05:14:13Z Which is better: building a heavy forwarder in Azure or using the Azure Marketplace BYOL option? https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445980#M77564 <P>If I need to build a heavy forwarder in Azure, is it better to do it from scratch or use the Azure Marketplace BYOL option?</P> Thu, 25 Oct 2018 15:23:01 GMT https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445980#M77564 rbrisseyii 2018-10-25T15:23:01Z Re: Which is better: building a heavy forwarder in Azure or using the Azure Marketplace BYOL option? https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445981#M77565 <P>Splunk Enterprise on the Azure Marketplace is provisioned with several data disks meant for indexing activity. If you just want a heavy forwarder, it would be better to build the forwarder from scratch without the extra disks.</P> Mon, 05 Nov 2018 19:34:27 GMT https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445981#M77565 jconger 2018-11-05T19:34:27Z Re: Which is better: building a heavy forwarder in Azure or using the Azure Marketplace BYOL option? https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445982#M77566 <P>What is the capacity/Azure SKU you would suggest for an environment that would be forwarding 10 TB of data per day? I see per Splunk Documentation, for large scale deployment, they recommend to use Standard_D15_v2 - 5 instances indexing 1 TB of data with search load from 8 concurrent users.</P> <P><A href="https://www.splunk.com/pdfs/technical-briefs/deploying-splunk-enterprise-on-microsoft-azure.pdf" target="_blank">https://www.splunk.com/pdfs/technical-briefs/deploying-splunk-enterprise-on-microsoft-azure.pdf</A></P> <P><A href="https://docs.microsoft.com/en-us/azure/virtual-machines/dv2-dsv2-series-memory?toc=/azure/virtual-machines/linux/toc.json&amp;bc=/azure/virtual-machines/linux/breadcrumb/toc.json" target="_blank">https://docs.microsoft.com/en-us/azure/virtual-machines/dv2-dsv2-series-memory?toc=/azure/virtual-machines/linux/toc.json&amp;bc=/azure/virtual-machines/linux/breadcrumb/toc.json</A></P> Wed, 30 Sep 2020 05:14:13 GMT https://community.splunk.com/t5/Getting-Data-In/Which-is-better-building-a-heavy-forwarder-in-Azure-or-using-the/m-p/445982#M77566 sarnathkj 2020-09-30T05:14:13Z