Deployment Architecture

What are minimum requirements for distributed test environment max 5 gb a day for Splunk Enterprise?

NJ
Path Finder

Hi 

We are looking into getting some more experience with Splunk Enterprise.

We therefore wanted to create a small distributed deployment. 

We are only going to index about 5 gb per day. 

The documentation distributed minimum requirements is for 300GB a per day.

So what is the minimum requirements for the search head and indexer for such a small distributed deployment? 

Thank you for any help

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

You can make them as small as you like, just be aware that Splunk probably won't support anything under the minima.  I'd go with 4 or more CPUs.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...