How encryption and data compression impact performance

[andreac81]

Hi to all,

I'm sizing a Splunk architecture, I'm trying to know how data encryption and compression impact on performance.
For example, if I enable data compression and encryption, do I need to size CPU to x % higher?

Thanks,
Andrea

[Azeemering]

Hi,

Can I point you to: https://splunk-sizing.appspot.com/
The compressed rawdata file is roughly 15% of the incoming , pre-indexed raw data. So based on that number you can apply the normal sizing.
I don't think that encryption impacts performance in terms of CPU to x % higher.....

[andreac81]

Usually both compression and encryption decrease system performance, I should calculate in Splunk how much performance decrease (if they decrease).