Monitoring Splunk

Raid 6, setting up for performance issues?

xxyz
Explorer

Deploying new indexers and trying maximize the storage we have. Raid 6 was configured on 15K SAS drives for Hot/Warm buckets and Raid 6 on 10K SAS drives for Cold Buckets. We average around just under 250 GB of data / day. I keep reading to have Hot/Warm on Raid 10. So am I setting myself up for performance issues here?

Tags (3)

alacercogitatus
SplunkTrust
SplunkTrust

Supposing, I wonder, whereby I found my self lost, that my internal dialogue was in fact a configuration 6 of Raid. I thusly found myself feeling ill, as I had lost parity of my own thoughts, and slowly began to rebuild my nervous system of coherent thought. For while my thoughts worked correctly, I feel fine. At the mere mention of an unstable coaxial connection, I immediately began to slow and consume more resources to rebuild myself. I couldn't keep up with both the sensory input and the internal rebuild. I began to backlog until I crashed. Upon waking, I found myself in a corrupted state, even more so than most politicians. Wearily I tell you, begin your life in the 1+0 of Raid, and happier shall you be.

jbernt_splunk
Splunk Employee
Splunk Employee

If you can do Raid 10 instead for hot/warm buckets, that would be best.

jtrucks
Splunk Employee
Splunk Employee

Yes, you are setting yourself up for potential performance problems at that ingest rate.

--
Jesse Trucks
Minister of Magic

Richfez
SplunkTrust
SplunkTrust

Yes. It's very likely.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...