topic Re: Splunk Free deployment virtual machines in Getting Data In

Splunk Free deployment virtual machines

monkeydjohn — Fri, 05 Apr 2019 09:50:24 GMT

Hi,

Mrs,Mr

I want deploy the products Splunk Free on a virtual machines linux ( Centos7) or Windows ( 2012R2 or 2016)
Which are the prerequisite ?
I read a lot of document and many question but the preequisite relate to splunk entreprise .
The prerequisite are same in oder to splunk Entreprise and splunk Free?
So
• 12 vCPU
• 12 GB of RAM
• Minimum 1200 random seek operations per second disk performance (sustained)

Thanks

PS: I am French I hope which you understand my message and I am sorry in order to my fault spelling.

Re: Splunk Free deployment virtual machines

jconger — Fri, 05 Apr 2019 23:19:53 GMT

The specifications depends on the amount of data ingested per day. The numbers referenced in the question are for an indexer that can ingest up to 300GB/day while supporting a search load.

https://docs.splunk.com/Documentation/Splunk/7.2.5/Capacity/Summaryofperformancerecommendations

The Splunk free license lets you index up to 500MB per day, so the hardware requirements are much less.

Re: Splunk Free deployment virtual machines

monkeydjohn — Mon, 08 Apr 2019 14:00:10 GMT

Hi jconger.

Thanks to reply me.

have you an idea of size vcpu , ram and storage in order to total users less than 4 if i use splunk free licence .
Just an idea .

Re: Splunk Free deployment virtual machines

jconger — Mon, 08 Apr 2019 15:06:45 GMT

CPU, RAM, and disk is based on data ingest and search rather than license type. At 500MB per day, you can run Splunk on a laptop computer or similar.