https://community.splunk.com/t5/Monitoring-Splunk/CPU-on-Indexers/m-p/471195#M3928 <P>Hello,</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/8.0.1/Capacity/Referencehardware" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.1/Capacity/Referencehardware</A></P> <P>Splunk documentation (High Performance option Spec) says 2GHz or higher CPU speed on indexers.</P> <P>Wondering have you seen use-cases where increasing the core count is helpful. Also the same case, using faster CPU’s.</P> <P>Thank you,<BR />Bobby, NetApp Inc.</P> Sat, 06 Jun 2020 00:17:16 GMT bobbyoommen 2020-06-06T00:17:16Z https://community.splunk.com/t5/Monitoring-Splunk/CPU-on-Indexers/m-p/471195#M3928 <P>Hello,</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/8.0.1/Capacity/Referencehardware" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.0.1/Capacity/Referencehardware</A></P> <P>Splunk documentation (High Performance option Spec) says 2GHz or higher CPU speed on indexers.</P> <P>Wondering have you seen use-cases where increasing the core count is helpful. Also the same case, using faster CPU’s.</P> <P>Thank you,<BR />Bobby, NetApp Inc.</P> Sat, 06 Jun 2020 00:17:16 GMT https://community.splunk.com/t5/Monitoring-Splunk/CPU-on-Indexers/m-p/471195#M3928 bobbyoommen 2020-06-06T00:17:16Z https://community.splunk.com/t5/Monitoring-Splunk/CPU-on-Indexers/m-p/471196#M3929 <P>Indexers are almost always DiskIO-bound, then PortIO-bound, then RAM-bound, then CPU-bound. Spend your money in that order. The best bang for you buck is probably ugrading your Ethernet to the fastest Hw/wires possible, then either going to <CODE>SmartStore</CODE> or upgrading disk to <CODE>direct-attached SSD</CODE>.</P> Fri, 20 Dec 2019 11:11:28 GMT https://community.splunk.com/t5/Monitoring-Splunk/CPU-on-Indexers/m-p/471196#M3929 woodcock 2019-12-20T11:11:28Z