What is the appropriate server sizing for Splunk Free on a Red Hat Linux instance running VMWare, 500MB log messaging per day?

[ed_hickey]

Running a POC with Splunk. Looking for the appropriate server sizing for a RH Linux instance running on VMWare. Max 500mb per day of log messaging.

Looking for CPU, Memory and Disk.

Thx Ed

[esix_splunk]

Sizing guides ands installation requirements -
http://docs.splunk.com/Documentation/Splunk/6.1.4/Installation/Systemrequirements http://docs.splunk.com/Documentation/Splunk/6.1.4/Installation/CapacityplanningforalargerSplunkdeplo...

Depending on data sources, but for 500mb/day POC, you can get away with minimal requirements. A 4vcore/4GB ram VM would probably be sufficient. Disk I/o is a contention point depending on what the use case is for your POC.