https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104285#M183159 <P>As long as you can give Splunk the disk IO and memory it needs it runs just fine in a VM. Perfect for Dev system.</P> Thu, 29 Mar 2012 13:58:55 GMT ftk 2012-03-29T13:58:55Z https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104283#M183157 <P>I read in splunk doc that we should not use splunk in virtual machine because splunk require more input and outpur.<BR /> But still can we use virtual machine for splunk for any task?</P> Thu, 29 Mar 2012 13:41:41 GMT https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104283#M183157 kml_uvce 2012-03-29T13:41:41Z https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104284#M183158 <P>I don't know where it says that you shouldn't use Splunk in a VM at all? While it's true that there are considerations to make when deploying Splunk on virtual machines, there's nothing stopping you from taking that route. Splunk (the company) themselves even run their main Splunk (the product) installation in VMs (see <A href="http://blogs.splunk.com/2012/02/28/splunkx-splunking-the-enterprise/">http://blogs.splunk.com/2012/02/28/splunkx-splunking-the-enterprise/</A> and <A href="http://blogs.splunk.com/2012/03/14/the-splunkx-environment/">http://blogs.splunk.com/2012/03/14/the-splunkx-environment/</A> ).</P> <P>More information on things to consider when deploying Splunk in virtual machines: <A href="http://www.splunk.com/web_assets/pdfs/secure/Splunk_and_VMware_VMs_Tech_Brief.pdf">http://www.splunk.com/web_assets/pdfs/secure/Splunk_and_VMware_VMs_Tech_Brief.pdf</A></P> Thu, 29 Mar 2012 13:55:57 GMT https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104284#M183158 Ayn 2012-03-29T13:55:57Z https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104285#M183159 <P>As long as you can give Splunk the disk IO and memory it needs it runs just fine in a VM. Perfect for Dev system.</P> Thu, 29 Mar 2012 13:58:55 GMT https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104285#M183159 ftk 2012-03-29T13:58:55Z https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104286#M183160 <P>Echoing Ayn's advice - it's all about scale and sizing. Most people oversubscribe their VM estate - especially with the number of network / disk I/O paths per guest. Splunk (like any other I/O intensive application) can suffer poor performance when the VM environment isn't sized properly or to too far oversubscribed.</P> Thu, 29 Mar 2012 13:59:18 GMT https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104286#M183160 dwaddle 2012-03-29T13:59:18Z https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104287#M183161 <P>All about size and scale..</P> Thu, 29 Mar 2012 14:00:18 GMT https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104287#M183161 Drainy 2012-03-29T14:00:18Z https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104288#M183162 <P>Also, there is a big difference between installing a full Splunk server on a VM (for the reasons mentioned above), and installing a forwarder on a virtual host sending the logs elsewhere, which is perfectly fine under almost any circumstance.</P> <P>/k</P> Mon, 02 Apr 2012 20:54:28 GMT https://community.splunk.com/t5/Splunk-Search/splunk-in-virtual-machine/m-p/104288#M183162 kristian_kolb 2012-04-02T20:54:28Z