Archive

Splunk throughtput

wys2010
New Member

Here is a question from our customer. It is how many Events can splunk eat per second. I read the manual book which say only capacity plan for users and I want to know If there is a throught benchmark for them.

Tags (1)
0 Karma

wys2010
New Member

Anthony and Genti, TKS a lot!

0 Karma

Genti
Splunk Employee
Splunk Employee

things to keep in mind:
Disk IO speed: how fast can you write to disk. If this is low, no matter how fast your machine is CPU wise or RAM wise, you will still fall short in indexing speed.
CPU: Its needed to write the info to disk, allow you to search, make it possible for you to monitor many files at the same time and parse through the logs.
RAM: well known..

treinke
SplunkTrust
SplunkTrust

That really depends on your hardware and network link. The better the equipment the more it will eat. Also with a distributive layout, you can put up smaller indexers across the map with a single web interface and you can get better performance due to the network delay.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!