Getting Data In

What would be good IOPS for our new indexer devices?

ddrillic
Ultra Champion

We are in the process of getting physical machines for our infrastructure - amazing thing for us ; -)
What would be good/optimal IOPS for the indexers?

Tags (2)
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Minimum 800 per indexer - 1200 or more is better. But, if you can afford it go all SSD and have thousands 🙂

View solution in original post

dwaddle
SplunkTrust
SplunkTrust

Minimum 800 per indexer - 1200 or more is better. But, if you can afford it go all SSD and have thousands 🙂

ddrillic
Ultra Champion

Thank you!

0 Karma

ddrillic
Ultra Champion

Quick question @dwaddle - for most of the day, our six indexers operate at 400 IOPS but we have two peaks a day, one around 10 am and one around 3 pm, where we reach 1800 IOPS. The SAs tell us that since most of the day we are at 400 IOPS, then we don't seem to need a higher IOPS devices. What should we do/respond?

Btw, on our current VM indexers, increasing the queues helps with these peaks - we manage to go through these peaks without crashing.

0 Karma
Get Updates on the Splunk Community!

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...

Want a chance to win $500 to the Splunk shop? Take our IT Incident Management Survey!

  Top Trends & Best Practices in Incident ManagementSplunk is partnering up with Constellation Research to ...