Deployment Architecture

hardware requirement for heavy forwarder - document

jiaqya
Builder

hardware requirement for heavy forwarder - document

could you redirect me to document for hardware requirement minimum for heavy forwarder...

Tags (1)
1 Solution

adonio
Ultra Champion

hello there,

official docs refer to general full splunk instance specs:
12 CPU
12 GB Memory
800 IOPS
300 GB Disk (since its not an indexer)
however, you might want to look at the following answers:
https://answers.splunk.com/answers/514046/what-is-the-recommended-hardware-requirement-for-h.html
https://answers.splunk.com/answers/439636/splunk-64-heavy-forwarder-system-hardware-cpumemdi.html
hope it helps

View solution in original post

jiaqya
Builder

Adonio, thanks.

we are using a lot of csv files as data inputs on the forwarder.
its currently running with 8 cpu, 8gb

recently we find that csv file indexing is not consistent as csv files are missing to be indexed randomly.

so was looking to verify if indeed we at least have the min requirement .. i guess we need to update.
probably add another forwarder as well..

question : is there a limit to number of csv files to be indexed per forwarder ???

0 Karma

adonio
Ultra Champion

hello there,

official docs refer to general full splunk instance specs:
12 CPU
12 GB Memory
800 IOPS
300 GB Disk (since its not an indexer)
however, you might want to look at the following answers:
https://answers.splunk.com/answers/514046/what-is-the-recommended-hardware-requirement-for-h.html
https://answers.splunk.com/answers/439636/splunk-64-heavy-forwarder-system-hardware-cpumemdi.html
hope it helps

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...