Deployment Architecture

Is there a recommended hardware configuration for Master Node?

dvernham
New Member

If Master Nodes don't do any indexing, is there a different configuration that is recommended for Master Nodes?    What would that configuration be?

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @dvernham,

there isn't any explicit recommended configuration for Master Node.

It should be the standard stand alone configuration (12 CPUs and 12 GB RAM), infact if you run the Health Check of the Monitoring Console it finds a configuration warning.

I usually use a lower configuration (8 CPUs and 8 GB RAM) but I could be denied at any time because, as already mentioned, there is no reference configuration for the Master Node.

Ciao.

Giuseppe

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

The recommended size of CM is dependent of your environment. How many indexes, indexers, buckets etc. you have. As there are some task which don't use threads, as someone could expects,  the most important requirement is performance of one core and also memory. Unfortunately there haven't been exact proposals from Splunk side, but you could get some hints from .conf presentations.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...