Monitoring Splunk

How do you estimate the storage sizing?

deepakc
Builder

I was following the guidelines from this page on how to estimate the storage sizing as a learning excercise, but I do not seem to get any totals and I have uploaded some sample data into a index.

The document is http://docs.splunk.com/Documentation/Splunk/7.0.1/Capacity/Estimateyourstoragerequirements
Im using Splunk 7.1/RHEL6.5.

Command output:

cd /opt/splunk/var/lib/splunk/defaultdb

sudo du -ch hot_v*
du: cannot access `hot_v*': No such file or directory
0 total

Any thoughts?

0 Karma

mayurr98
Super Champion
0 Karma

harsmarvania57
Ultra Champion

You need to check DB size in /opt/splunk/var/lib/splunk/defaultdb/db for hot & warm buckets and for cold buckets please check in /opt/splunk/var/lib/splunk/defaultdb/colddb

There is another site (https://splunk-sizing.appspot.com/) on which you can calculate index and storage size.

deepakc
Builder

ok many thanks

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...