Best practices for building a splunk indexers with local HHD or SSD

[benazir]

Hi ,

our environment collects at least 11 tb of data per day and we have nearly 16 indexers in SAN. we need an advice for the new build ,whether local SSD is powerful in IO rate than SAN?
can we build indexer with local SSD. which is the best practice.

[nickhills]

If you have an environment that large, I suggest you contact Splunk support for any queries on sizing & performance.

However, the Splunk official sizing guidelines would suggest you would need 110 indexers 🙂
11,000 GB a day \ 100GB per indexer
So at your scale, you are off the official documented charts!

Definitely worth a call to your account manager on that one!