Installation

Which type of storage is suitable of Splunk

Somesh
Engager

Can someone suggest which type of storage is best for Splunk Cluster ? Is it Block storage or Object Storage.

Labels (4)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

this depends on your use case and where and how you have installed Splunk. In on premise in most cases block storage is the best/only suitable solution. You haven’t enough good (fast+bandwith) storage network + storage for object storage.

But in cloud e.g. AWS you could use object storage (S3) if/when you could build your environment with enough big local cache (NVMe). Basically most of your requests must hit into cache and then it works, but if too many requests goes to S3 then you suffer bad response time and user experience.

r. Ismo

0 Karma

Somesh
Engager

Hello @richgalloway ,

 

Could you please tell me why Block storage over Object Storage ?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk requires a hierarchical file system.  You can, however, move your frozen data to an object store, if you wish.

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Block storage

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...