Deployment Architecture

What are minimum requirements for distributed test environment max 5 gb a day for Splunk Enterprise?

NJ
Path Finder

Hi 

We are looking into getting some more experience with Splunk Enterprise.

We therefore wanted to create a small distributed deployment. 

We are only going to index about 5 gb per day. 

The documentation distributed minimum requirements is for 300GB a per day.

So what is the minimum requirements for the search head and indexer for such a small distributed deployment? 

Thank you for any help

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Bridging the Gap: Splunk Helps Students Move from Classroom to Career

The Splunk Community is a powerful network of users, educators, and organizations working together to tackle ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...