Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Splunk 5 as VM and using Nimble Storage for sh...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello everyone,
Does anyone use or know anyone using Splunk 5 in this topology: 2 Splunk indexers (clustered & replicated) running as a VMware VM guest and connecting to Nimble Storage CS220G series storage via iSCSI?
Thank you.
S.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for your response. Did you attempt running an indexer on the Nimble CS at all and opt for hardware based on your experiences, or just avoid it alltogether?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Opted for hardware based on Splunk PS best practices. Bare metal is still the best option for Splunk Indexers.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you end up attempting this? I'm considering the same setup myself, and would be curious as to your experience.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.
Index This | When is October more than just the tenth month?
Observe and Secure All Apps with Splunk
What’s New & Next in Splunk SOAR
