Deployment Architecture

Splunk Cluster Master and Search Head System Requirements


We plan to deploy the Splunk cluster and migrate our stand-alone indexer server.
While the requirements for Cluster Node are obvious, its not clear to me what Master and Search head server should be like in terms of CPU, RAM, IO.
Is there any formula I can calculate it per our current indexed data size and search rate ?
Thanks !

Tags (1)


Not clear answers, but maybe following URLs help you to estimate hardware requirements for Indexer node and Search head.

Reference hardware

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!