Deployment Architecture

What are minimum requirements for distributed test environment max 5 gb a day for Splunk Enterprise?

NJ
Path Finder

Hi 

We are looking into getting some more experience with Splunk Enterprise.

We therefore wanted to create a small distributed deployment. 

We are only going to index about 5 gb per day. 

The documentation distributed minimum requirements is for 300GB a per day.

So what is the minimum requirements for the search head and indexer for such a small distributed deployment? 

Thank you for any help

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...