https://community.splunk.com/t5/Getting-Data-In/Capacity-of-HEC-token/m-p/532115#M89480 <P>Hi. So the http event collect (HEC) can send to a set of indexers. I guess you are limited by how fast the HEC can send to the indexers and how fast the indexers in turn can ingest.</P><P>I have seen recommendations from Splunk to indexer ingestion to be in the 300 to 400GB/day ingestion per indexer from all inputs but we push our indexers much harder.</P> Sat, 05 Dec 2020 23:24:04 GMT burwell 2020-12-05T23:24:04Z https://community.splunk.com/t5/Getting-Data-In/Capacity-of-HEC-token/m-p/532092#M89478 <P>Hi,</P><P>Splunk Enterprise resides in on-premises.</P><P>What would be the capacity of the HEC token?</P><P>How much logs can be ingested into splunk using 1 HEC token on daily basis?</P><P>&nbsp;</P><P>&nbsp;</P> Sat, 05 Dec 2020 03:38:16 GMT https://community.splunk.com/t5/Getting-Data-In/Capacity-of-HEC-token/m-p/532092#M89478 VijaySrrie 2020-12-05T03:38:16Z https://community.splunk.com/t5/Getting-Data-In/Capacity-of-HEC-token/m-p/532115#M89480 <P>Hi. So the http event collect (HEC) can send to a set of indexers. I guess you are limited by how fast the HEC can send to the indexers and how fast the indexers in turn can ingest.</P><P>I have seen recommendations from Splunk to indexer ingestion to be in the 300 to 400GB/day ingestion per indexer from all inputs but we push our indexers much harder.</P> Sat, 05 Dec 2020 23:24:04 GMT https://community.splunk.com/t5/Getting-Data-In/Capacity-of-HEC-token/m-p/532115#M89480 burwell 2020-12-05T23:24:04Z