Monitoring Splunk

Raid 6, setting up for performance issues?

xxyz
Explorer

Deploying new indexers and trying maximize the storage we have. Raid 6 was configured on 15K SAS drives for Hot/Warm buckets and Raid 6 on 10K SAS drives for Cold Buckets. We average around just under 250 GB of data / day. I keep reading to have Hot/Warm on Raid 10. So am I setting myself up for performance issues here?

Tags (3)

alacercogitatus
SplunkTrust
SplunkTrust

Supposing, I wonder, whereby I found my self lost, that my internal dialogue was in fact a configuration 6 of Raid. I thusly found myself feeling ill, as I had lost parity of my own thoughts, and slowly began to rebuild my nervous system of coherent thought. For while my thoughts worked correctly, I feel fine. At the mere mention of an unstable coaxial connection, I immediately began to slow and consume more resources to rebuild myself. I couldn't keep up with both the sensory input and the internal rebuild. I began to backlog until I crashed. Upon waking, I found myself in a corrupted state, even more so than most politicians. Wearily I tell you, begin your life in the 1+0 of Raid, and happier shall you be.

jbernt_splunk
Splunk Employee
Splunk Employee

If you can do Raid 10 instead for hot/warm buckets, that would be best.

jtrucks
Splunk Employee
Splunk Employee

Yes, you are setting yourself up for potential performance problems at that ingest rate.

--
Jesse Trucks
Minister of Magic

Richfez
SplunkTrust
SplunkTrust

Yes. It's very likely.

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...