What have people's experiences been setting up Splunk in Azure?

[Robbie1194]

Hi guys,

just a general question asking about what people's experiences have been when setting up a clustered splunk environment in Azure? (Or AWS as I imagine it's very similar).

Are there any things I specifically need to watch out for or any performance related things I should know about?

Cheers

[Robbie1194]

Hi @pyro_wood,

I have looked at the conf presentation a few times but I noticed it's slightly old now so I was looking for some slightly newer opinions.

I know Azure has changed a lot in the last two years so I thought there could be some notable differences between then and now. The main one that springs to mind is Azure's introduction of managed data disks.

Cheers,
Robbie

[horsefez]

@Hi Robbie1194,

have you found this presentation from .conf2016 already?
There are some architectural ideas and best practices.

https://conf.splunk.com/files/2016/slides/deploying-splunk-enterprise-on-microsoft-azure-cloud.pdf