Splunk 5 as VM and using Nimble Storage for shared storage

[cgisplunk]

Hello everyone,

Does anyone use or know anyone using Splunk 5 in this topology: 2 Splunk indexers (clustered & replicated) running as a VMware VM guest and connecting to Nimble Storage CS220G series storage via iSCSI?
Thank you.
S.

[cgisplunk · Accepted solution]

Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.

[cfeskens]

Thanks for your response. Did you attempt running an indexer on the Nimble CS at all and opt for hardware based on your experiences, or just avoid it alltogether?

[cgisplunk]

Opted for hardware based on Splunk PS best practices. Bare metal is still the best option for Splunk Indexers.

[cfeskens]

Did you end up attempting this? I'm considering the same setup myself, and would be curious as to your experience.

[cgisplunk]

Almost.
We ended up deploying another Indexer on hardware server, but we'll deploy a search head as a VM with Nimble CS behind it, but again all indexing will be done on a metal local storage box.