Deployment Architecture

Is my hardware architecture ideal for my environment?

rafaelqueiroz
Explorer

Hello, I have a hardware architecture for my Splunk INDEX as follows:

8 CORES Xeon 2.4GHZ and 40GB RAM

And for my SEARCH HEAD

8 CORES Xeon 2.4GHz and 8GB RAM

I'm upgrading to 55GB daily, and I wonder if this will be ideal architecture below:

SPARC T5 16 CORES 3.6GHz 48GB RAM

Tags (2)
0 Karma

jimodonald
Contributor

From a distance, I don't think your proposed hardware is "ideal" but you know your environment much better than I do. For your reference, the reference hardware is identified below in the attached link.

http://docs.splunk.com/Documentation/Splunk/6.2.1/Capacity/Referencehardware

Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...