Estimating Metrics Index License Consumption

[shocko]

I have been asked to start monitoring several Windows servers for computer consumption i.e. CPU and memory consumption. I'm looking at 15 second sample intervals. A metrics index is the natural place to place this.

I'm wondering how much license it will consume per system? I was thinking the following approach might work and I'd be interested in peer review (not that I can say I'm a peer of many on this forum given my noob level at Splunk! 🙂 😞

- Use a VM with 1 vCPU and a 15s sample interval for CPU and Memory and sent to a dedicated metrics index

• Collect for 12 hrs
• View license consumption

I then could say that adding another vCPU to a system would require X amount in licensing based on the same sample interval. Is this reasonable? 

[isoutamo · Accepted solution]

Hi

here https://docs.splunk.com/Documentation/Splunk/8.2.4/Admin/HowSplunklicensingworks is told that  metric index use max 150 byte per event. If you can’t calculate your event size you could use 150b as estimates.

r. Ismo