Capacity Planning

[ganesh999]

I have build a new environment. So the requirement is have to index 100gb data what are the hard ware requirement? How can will plan how much indexer volume have to keep.How many Search heads are preferable....... The environment have to build in distributed environment ?

Thanks in Advance,
ganesh

[somesoni2]

See these Splunk documentation for capacity planning:
https://docs.splunk.com/Documentation/Splunk/7.2.6/Capacity/DimensionsofaSplunkEnterprisedeployment
https://docs.splunk.com/Documentation/Splunk/7.2.6/Capacity/Referencehardware