Deployment Architecture

Indexer server performance vs indexer cluster

Adpafer
Loves-to-Learn Everything

Hi Everybody,

Could you pls explain which works faster - to have 1 indexer server, high performance (48CPU, 128GB) or 2 indexers in cluster (each 24CPU, 64GB)?

 

thanks for reply.

 

regards, pawelF

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Adpafer ,

you can compare one high performance (48CPU, 128GB) indexer with two medium size (each 24CPU, 64GB) indexers without cluster, and the performaces are more or less the same.

You cannot compare one indexer with two clustered indexers because, in the second case, you have also High Availability performances that obviously you don't have with one server.

Anyway, I always hint more systems than one, even if not clustered.

Obviously clustered is better!

Ciao.

Giuseppe

richgalloway
SplunkTrust
SplunkTrust

It depends.  Faster at what?  Assuming the same CPU in both cases, both will run at the same speed. When you have more than one indexer with data distributed among them, searches will be faster because of parallel processing.  This benefit works with both clustered and independent indexers.

Clustering of indexers is for data protection/redundancy rather than for speed.

There no doubt is some overhead in a cluster for replicating data, but I've not seen any data about how much that affects performance.

---
If this reply helps you, Karma would be appreciated.
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...