How much CPU and RAM to allocate to SPLUNK VM which is indexing 25GB per day?

[muralisushma7]

Hi,

I need to index 25GB per day to the SPLUNK machine. I am not pretty sure as what exactly the size of CPU and RAM should be.

Can someone guide me on this?

Thanks & Regards,
Sushma.

[renjith_nair]

@muralisushma7 ,
You need to consider the searches running/number of users etc.

Refer here to start with the selection of deployment : http://docs.splunk.com/Documentation/Splunk/7.1.2/Capacity/Summaryofperformancerecommendations

And then refer http://docs.splunk.com/Documentation/Splunk/7.1.2/Capacity/Referencehardware for a reference hardware for your selection of deployment

Also refer to this app (not splunk supported though) - https://splunk-sizing.appspot.com

[muralisushma7]

Thanks for the update.

Regards,
Sushma.

[renjith_nair]

Hi Sushma,
If it helps you, do upvote/accept as answer 🙂