Security

SSDs RAID Level

jensterddcaa
New Member

Spunk "Inheriter" here - getting conflicting opinions from hardware SAN storage vendor vs. Splunk.
Since the beginning, I've gone by the rule "RAID 5 + Splunk = slow performance"
With today's enterprise class SSD drives and SAN-level tiering, the h/w vendor states that RAID 5 works fine.
I even found a Splunk Live! presentation that says performance won't suffer.
Would love to get some real-world feedback!

0 Karma

nickhills
Ultra Champion

I can't give credit, because I cant remember who said it on Slack, but....

Even if your vendors SAN can provide infinite IOPS, it probably wont.

Take everything a vendor (and your storage team) tell you with a pinch of salt.
The story you will be told is the one from the glossy marketing sheet, however when it comes to you getting your slice of the pie, you're just another 'customer' on the SAN, and your needs have to be balanced with the other workloads on the storage system too.

Many people have had great success with new fast shared storage, but there is certainly a bigger number who have not.
My preference is indexers with dedicated local ssd, for hot/warm.

Shared storage has its place, for me, that is cold!
:)

If my comment helps, please give it a thumbs up!
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...