- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
NJ
Path Finder
01-30-2023
02:37 PM
Hi
We are looking into getting some more experience with Splunk Enterprise.
We therefore wanted to create a small distributed deployment.
We are only going to index about 5 gb per day.
The documentation distributed minimum requirements is for 300GB a per day.
So what is the minimum requirements for the search head and indexer for such a small distributed deployment?
Thank you for any help
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
01-30-2023
05:29 PM
You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima. I'd go with 4 or more CPUs.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
01-30-2023
05:29 PM
You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima. I'd go with 4 or more CPUs.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
