https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369420#M5239 <P>I have no idea what you mean by "effort" but maybe these?</P> <P><A href="https://www.splunk.com/blog/2015/02/18/splunk-sizing-made-easy.html">https://www.splunk.com/blog/2015/02/18/splunk-sizing-made-easy.html</A><BR /> <A href="https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html">https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html</A></P> Fri, 23 Jun 2017 08:33:40 GMT woodcock 2017-06-23T08:33:40Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369419#M5238 <P>Splunk efforts estimator is available for custom data source integartion? So that efforts can be calculated.</P> Fri, 23 Jun 2017 05:42:58 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369419#M5238 sayash27 2017-06-23T05:42:58Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369420#M5239 <P>I have no idea what you mean by "effort" but maybe these?</P> <P><A href="https://www.splunk.com/blog/2015/02/18/splunk-sizing-made-easy.html">https://www.splunk.com/blog/2015/02/18/splunk-sizing-made-easy.html</A><BR /> <A href="https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html">https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html</A></P> Fri, 23 Jun 2017 08:33:40 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369420#M5239 woodcock 2017-06-23T08:33:40Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369421#M5240 <P>Hi Wddocock,</P> <P>Thanks for information. </P> <P>By efforts I mean no of days estimation for device to be on-board on splunk. Based on device type and supported/unsupported. Each SIEM have excel sheet to estimate that. So i was looking for that.</P> Fri, 23 Jun 2017 09:45:28 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369421#M5240 sayash27 2017-06-23T09:45:28Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369422#M5241 <P>I still do not understand. Do you mean how many days to keep the data before discarding it (this is called "retention")?</P> Fri, 23 Jun 2017 10:02:53 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369422#M5241 woodcock 2017-06-23T10:02:53Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369423#M5242 <P>No. Its before integration of any data source with Splunk. </P> <P>How much time(in days) it will take to integrate a set of data sources with Splunk.</P> <P>We will calculate this depending upon type of data source. Hope this answer your question.</P> Fri, 23 Jun 2017 10:06:52 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-efforts-estimator-is-available-for-custom-data-source/m-p/369423#M5242 sayash27 2017-06-23T10:06:52Z