Installation

Splunk Initial requirement gathering from client

Jagadeesh2022
Path Finder

Hi All,

One of our new client interested to use Splunk tool to monitor their application. 

To setup Splunk for their application what are the initial details we need to ask to Client to configure Splunk.

Like which OS they use, How many servers, which cloud , which database, etc..

If there is any template available to get the basic required details from client kindly share with me. or what are the specific details we need to request them.

Thanks in advance. 

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @Jagadeesh2022,

your request is just a little vague, because there are many parameters to consider:

  • how many logs you have to ingest?
  • how many users?
  • do you need an HA architecture?
  • do you need to use Splunk Premium Apps as ES or ITSI?

So you should contact Splunk Sales Engineers of your country or one Splunk Partner to make an analysis and a design of of your architecture, it isn't a question for the community.

Anyway, for the architectures, you can see at https://www.splunk.com/en_us/resources/splunk-validated-architectures.html?locale=en_us

For the reference hardware you can see at https://docs.splunk.com/Documentation/Splunk/9.0.2/Capacity/Referencehardware

For the Operative System, you can use Linux or Windows but I never saw a large Splunk production environment based on Windows.

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @Jagadeesh2022,

your request is just a little vague, because there are many parameters to consider:

  • how many logs you have to ingest?
  • how many users?
  • do you need an HA architecture?
  • do you need to use Splunk Premium Apps as ES or ITSI?

So you should contact Splunk Sales Engineers of your country or one Splunk Partner to make an analysis and a design of of your architecture, it isn't a question for the community.

Anyway, for the architectures, you can see at https://www.splunk.com/en_us/resources/splunk-validated-architectures.html?locale=en_us

For the reference hardware you can see at https://docs.splunk.com/Documentation/Splunk/9.0.2/Capacity/Referencehardware

For the Operative System, you can use Linux or Windows but I never saw a large Splunk production environment based on Windows.

Ciao.

Giuseppe

Jagadeesh2022
Path Finder

Thank you @gcusello . I will check with Splunk team for further process. 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Jagadeesh2022,

good for you, see next time!

Please accept one answer for the other people of Community

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...