Hi,
We are currently considering deploying a small Splunk Enterprise platform on AWS.
Details:
- 10G/d of ingestion
- Less than 10 users
- The data is not "time-framed", as we collect data and sends it from time to time.
- The platform will mostly be used for analysts' searches & queries.
I've read about SmartStore, which is supposed to be cheaper, though slower. I also understand that it caches data/buckets mostly by time.
How slower would it be, comparing to EBS storage, and would you suggest using it for warm data?
Much Appreciated.
