Getting Data In

What would be good IOPS for our new indexer devices?

ddrillic
Ultra Champion

We are in the process of getting physical machines for our infrastructure - amazing thing for us ; -)
What would be good/optimal IOPS for the indexers?

Tags (2)
1 Solution

dwaddle
SplunkTrust
SplunkTrust

Minimum 800 per indexer - 1200 or more is better. But, if you can afford it go all SSD and have thousands 🙂

View solution in original post

dwaddle
SplunkTrust
SplunkTrust

Minimum 800 per indexer - 1200 or more is better. But, if you can afford it go all SSD and have thousands 🙂

ddrillic
Ultra Champion

Thank you!

0 Karma

ddrillic
Ultra Champion

Quick question @dwaddle - for most of the day, our six indexers operate at 400 IOPS but we have two peaks a day, one around 10 am and one around 3 pm, where we reach 1800 IOPS. The SAs tell us that since most of the day we are at 400 IOPS, then we don't seem to need a higher IOPS devices. What should we do/respond?

Btw, on our current VM indexers, increasing the queues helps with these peaks - we manage to go through these peaks without crashing.

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...