Deployment Architecture

Splunk Sizing

jaracan
Communicator

Hi,

Seems like this link below is no longer working.

https://splunk-sizing.appspot.com/

 

Does Splunk have online splunk sizing that we can use to do capacity planning estimates?

Tags (1)
0 Karma

saifalshoker
Explorer

Hi, 

 

you can use this link 

 

https://splunk-sizing.greenzone.tech/

 

for providing proper splunk sizing 

 

thanks, 

 

saif

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @jaracan ,

for storage, you can use https://splunk-sizing.soclib.net/

for the resources, I hint to follow the Splunk Architecting Training.

This link could be useful https://lantern.splunk.com/Splunk_Platform/Product_Tips/Administration/Sizing_your_Splunk_architectu... 

Ciao.

Giuseppe

0 Karma

saifalshoker
Explorer

Hi, 

 

you can use this link 

 

https://splunk-sizing.greenzone.tech/

 

for providing proper splunk sizing , retention policy, storage calculation 

 

thanks, 

 

saif

Wohamed_wakkad
Explorer

@saifalshoker Why do this site and the official Splunk site omit Data Model Acceleration (DMA) from their calculations? Furthermore, they don't factor in the margin of free space or the minimum free disk. While these are just estimations, it is highly beneficial to include these in.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...