- Find Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Bandwidth requirements for Splunk
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It truly depends on many factors, like number of events, number of forwarders, as well as stakeholder expectations/requirements, and how much time and money you have!
https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Referencehardware
https://www.aplura.com/splunk-best-practices/#hardware
The blog post how's you the bandwidth usage difference between universal and heavy forwarders.
Universal or Heavy, that is the question? | Splunk
The general answer is it depends, however you can refer to
https://answers.splunk.com/answers/2014/what-is-the-minimum-network-bandwidth-required-for-splunk-fo... OR https://answers.splunk.com/answers/340084/how-to-search-how-much-bandwidth-a-forwarder-is-us.html
https://docs.splunk.com/Documentation/Splunk/9.2.0/Indexer/Systemrequirements
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It truly depends on many factors, like number of events, number of forwarders, as well as stakeholder expectations/requirements, and how much time and money you have!
https://docs.splunk.com/Documentation/Splunk/latest/Capacity/Referencehardware
https://www.aplura.com/splunk-best-practices/#hardware
The blog post how's you the bandwidth usage difference between universal and heavy forwarders.
Universal or Heavy, that is the question? | Splunk
The general answer is it depends, however you can refer to
https://answers.splunk.com/answers/2014/what-is-the-minimum-network-bandwidth-required-for-splunk-fo... OR https://answers.splunk.com/answers/340084/how-to-search-how-much-bandwidth-a-forwarder-is-us.html
https://docs.splunk.com/Documentation/Splunk/9.2.0/Indexer/Systemrequirements
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
