default database

[chiraghchandani]

We need to deploy Splunk into staging and production environments. We shall have around 50 GB of static log data to monitor daily. Splunk documentation wrote that it requires around three times of the quantity of data being indexed. So my question is:
Is it possible to reduce the disk space which Splunk requires before execution?
How to limit the number of indexes it internally creates? Any documentation which can help
Thanks

[alacercogitatus]

1. Splunk is always on, always consuming data, so I'm not sure what you mean by "before execution".
2. Splunk only 3 or so internal indexes. The rest are created by you as needed.

I think you have a different understanding when it comes to how Splunk consumes data. Please review this and see if it helps: http://docs.splunk.com/Documentation/Splunk/6.0/Indexer/Howindexingworks

[alacercogitatus]

Does this answer your question? Please accept if it does. Thanks!

[chiraghchandani]

Thanks for your answer. Indeed, Splunk is always on, before execution is not the correct word.. It is always executing stuff!!