Splunk Enterprise Security

接入日志的最大数量

yafei
New Member

想了解下,SPlunk 单台服务器,最多可以接入多大的数据量 ,可以给工

Labels (1)
0 Karma

meetmshah
Contributor

您好,请问一下问题是否已解决,或者您还有其他问题吗?

0 Karma

meetmshah
Contributor

你好 @yafei,

Splunk 服务器可以访问的数据没有明确的限制。 例如,如果您有分布式集群/非集群环境,则它可以访问任意数量的事件。 如果询问特定于容量规划,下面是 2 个 Splunk 文档,可以帮助您解决相同问题 -

- https://docs.splunk.com/Documentation/Splunk/9.1.1/Capacity/IntroductiontocapacityplanningforSplunkE...
- https://docs.splunk.com/Documentation/Splunk/9.1.1/Capacity/Referencehardware

另外,这里有一个类似的问题 - https://community.splunk.com/t5/Splunk-Enterprise/Capacity-planning-best-practices-for-Splunk-Enterp...

 

如果有帮助,请接受解决方案并点击 Karma, 或者如果您对此有任何疑问,请告诉我!

0 Karma

yafei
New Member

麻烦提供下,数据规格说明

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...