Hi,
I am planning to install a Splunk indexer on a VM machine and get data from forwarders which are installed on App Servers.
Do you think there is any performance concern of installing indexer on a VM?
and here for the requirements :
http://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Recommended_hardw...
but VM is usually suboptimal for I/O reasons.