what would be the best approach for IaC setup for Splunk enterprise?
Currently we are using Azure VM and deb installation of Splunk enterprise installation and update are done manualy.
We would like to improve this process to install Splunk from scratch and use a better setup:
1. install it in the AKS cluster
2. use docker approach
3. use terraform for iac
what would be best-suggested approach here we have a disk e.g around 1TB of data for Splunk
thank you in advance
There is no objective "best approach" for IaC setup for Splunk Enterprise.
I would recommend choosing the one which your engineers are most familiar with, and the one where the pricing structure best fits into your budget.