Getting Data In
Highlighted

What is the ideal Splunk setup for log monitoring of different inputs?

New Member

How to determine if Splunk needs to be scaled horizontally or vertically? For logs up to 5GB from different inputs, what should be the ideal setup?

0 Karma
Highlighted

Re: What is the ideal Splunk setup for log monitoring of different inputs?

SplunkTrust
SplunkTrust

up to 5GB dont scale,
stay at a single instance and you will do great

0 Karma
Highlighted

Re: What is the ideal Splunk setup for log monitoring of different inputs?

Esteemed Legend

You need to add indexers once you hit about 250GB/day of input.

https://www.splunk.com/blog/2014/05/07/splunk-sizing-and-performance-doing-more-with-more.html

0 Karma