Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: hardware requirement for heavy forwarder - doc...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hardware requirement for heavy forwarder - document
could you redirect me to document for hardware requirement minimum for heavy forwarder...
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hello there,
official docs refer to general full splunk instance specs:
12 CPU
12 GB Memory
800 IOPS
300 GB Disk (since its not an indexer)
however, you might want to look at the following answers:
https://answers.splunk.com/answers/514046/what-is-the-recommended-hardware-requirement-for-h.html
https://answers.splunk.com/answers/439636/splunk-64-heavy-forwarder-system-hardware-cpumemdi.html
hope it helps
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Adonio, thanks.
we are using a lot of csv files as data inputs on the forwarder.
its currently running with 8 cpu, 8gb
recently we find that csv file indexing is not consistent as csv files are missing to be indexed randomly.
so was looking to verify if indeed we at least have the min requirement .. i guess we need to update.
probably add another forwarder as well..
question : is there a limit to number of csv files to be indexed per forwarder ???
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hello there,
official docs refer to general full splunk instance specs:
12 CPU
12 GB Memory
800 IOPS
300 GB Disk (since its not an indexer)
however, you might want to look at the following answers:
https://answers.splunk.com/answers/514046/what-is-the-recommended-hardware-requirement-for-h.html
https://answers.splunk.com/answers/439636/splunk-64-heavy-forwarder-system-hardware-cpumemdi.html
hope it helps
Calling All Security Pros: Ready to Race Through Boston?
Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...
Customer success is front and center at .conf25
