Splunk App for VMware: Logging expectations

[SplunkFu]

Hi there,

I was looking at the videos for the "Splunk App for VMware", and in it, it says to expect between 600MB and 1024MB per host per day... To clarify is this per ESX/i host, or is this per virtual machine host?

For example, does it mean:

600MB - 1024MB x 10 ESX hosts = 6000MB - 10240MB/day

OR

600MB - 1024MB x 100 VM hosts = 60,000MB - 102,400MB/day

(values are just random)

Thanks.

[bbingham · Accepted solution]

it is per ESX host, so your first response is the proper one.

[bbingham]

No problem! Let me know how the installation goes 😛

[SplunkFu]

Okay, thanks, that is what I thought would be more realistic! But just had to be sure, before we commit to anything.