Knowledge Management

AWS Deployment - EBS vs SmartStore (S3)

New Member


We are currently considering deploying a small Splunk Enterprise platform on AWS.


  • 10G/d of ingestion
  • Less than 10 users
  • The data is not "time-framed", as we collect data and sends it from time to time.
  • The platform will mostly be used for analysts' searches & queries.

I've read about SmartStore, which is supposed to be cheaper, though slower. I also understand that it caches data/buckets mostly by time.

How slower would it be, comparing to EBS storage, and would you suggest using it for warm data?

Much Appreciated.

Labels (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.