Deployment Architecture

Presenting Splunk Large-Scale Design with Mermaid / Draw.io or similar products

koshyk
Super Champion

hi Folks,

I’m preparing to present a large-scale Splunk design to stakeholders and want to make it interactive. To achieve this, I’m considering using Mermaid, which allows us to start with code, iterate incrementally, and improve easily over time. Below is my initial draft of the design.
 

Screenshot 2025-03-19 at 23.45.14.png

 

I’d appreciate your input on two points:
  • Are there any obvious mistakes in this draft? (It’s been a while since I last worked on Splunk design, especially after transitioning to Splunk Cloud.)
  • Are you aware of any pre-existing Mermaid or Draw.io diagrams for large-scale Splunk clusters that we could adapt or reuse?
Thanks in advance for your feedback!

 

0 Karma

PickleRick
SplunkTrust
SplunkTrust

What do you mean by "interactive" here?

Why not just use SVA diagrams? https://docs.splunk.com/Documentation/SVA/current/Architectures/About

0 Karma

koshyk
Super Champion

Interactive in the sense, you can click in each and it can drill down into further details.

The main reason for diagram as a code is, we can maintain in version control

0 Karma

livehybrid
Influencer

I'd definitely recommend looking at the SVA models that @PickleRick linked to. 

I like the diagram-as-code approach with Mermaid but they arent the prettiest! If you do go down the draw.io route then there are some icons available at https://github.com/livehybrid/splunk_drawio_icons

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

koshyk
Super Champion

thanks for the draw.io icons

0 Karma
Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

New This Month - Splunk Observability updates and improvements for faster ...

What’s New? This month, we’re delivering several enhancements across Splunk Observability Cloud for faster and ...

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...