Deployment Architecture

Deployment Server Performance Reference

aojie654
Path Finder

Hi, Splunkers:

About a week ago, a customer asked me that is there a reference for deployment server which has 1200+ client?

They have the high speed LAN but not sure about CPU and Memory should configure to server.

Any idea for this?

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi aojie654,
in Splunk documentation, there isn't a clear requirement for Deployment Server infrastructure, they generally says that it's the same of other Splunk systems (at least 12 CPUs and 12 GB of RAM).
If you use the Monitoring Console Health Check, it says that at least you need 12 CPUs and 12 GB of RAM.
My hint is: usually Deployment Server is a Virtual System so start with a less configuration (e.g. 8 CPUs and 8 GB of RAM) and then monitor performances with the Monitoring Console and eventually improve configuration.

The only clear requirement is that, if you have more than 50 deployment clients, you have to use a dedicated server without any additional role!
If it's a physical server it's better but there's no problems with a virtual server.

Bye.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi aojie654,
in Splunk documentation, there isn't a clear requirement for Deployment Server infrastructure, they generally says that it's the same of other Splunk systems (at least 12 CPUs and 12 GB of RAM).
If you use the Monitoring Console Health Check, it says that at least you need 12 CPUs and 12 GB of RAM.
My hint is: usually Deployment Server is a Virtual System so start with a less configuration (e.g. 8 CPUs and 8 GB of RAM) and then monitor performances with the Monitoring Console and eventually improve configuration.

The only clear requirement is that, if you have more than 50 deployment clients, you have to use a dedicated server without any additional role!
If it's a physical server it's better but there's no problems with a virtual server.

Bye.
Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...