Deployment Architecture

What are minimum requirements for distributed test environment max 5 gb a day for Splunk Enterprise?

NJ
Path Finder

Hi 

We are looking into getting some more experience with Splunk Enterprise.

We therefore wanted to create a small distributed deployment. 

We are only going to index about 5 gb per day. 

The documentation distributed minimum requirements is for 300GB a per day.

So what is the minimum requirements for the search head and indexer for such a small distributed deployment? 

Thank you for any help

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Alpha Launch: AI-Assisted Auto-Schematization for CIM

Streamlining Data Onboarding: Announcing the Alpha Release of AI-Assisted Auto-Schematization For many Splunk ...

Enterprise Security(ES) Essentials or Premier? Let's discuss Splunk ES Editions on ...

  Hi everyone, Last year at .conf25, we shared something exciting: Splunk Enterprise Security is evolving ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 5

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...