Getting Data In

VM templating of Splunk instances

takaakinakajima
Path Finder

We plan to create Splunk pre-installed virtual machine (VM)
templates for internal use.

We have assumed the following points should be taken steps
with Splunk VM templates.

Does someone have any other ideas or points to notine for VM templates?

In a view point of DevOps, templates should be minimize like pure-OS,
Splunk or other applications should be installed and configured
via provisioning tools (Ansible, Chef, Puppet, Salt Stack, ...)
after launch of VMs.

0 Karma
1 Solution

sdvorak_splunk
Splunk Employee
Splunk Employee

I assume you will take care of the OS level stuff as well:
ulimits
Turn off THP

Otherwise, looks relatively solid.

View solution in original post

0 Karma

sdvorak_splunk
Splunk Employee
Splunk Employee

I assume you will take care of the OS level stuff as well:
ulimits
Turn off THP

Otherwise, looks relatively solid.

0 Karma

takaakinakajima
Path Finder

Thank you @sdvorak.

I agree with you. OS tuning is important, especially for production.

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...