Splunk Enterprise

Is it possible to use smartstore with on-prem deployment?

brandy81
Path Finder

Hi All,

Is it possible to use smartstore with on-prem Splunk deployment if the smartstore will be implemented on AWS S3?

It though it is possible as long as using high speed network service from AWS such as Direct Connect something like that..  I saw the doc below and seems that it is not possible.

https://docs.splunk.com/Documentation/Splunk/8.1.1/Indexer/SmartStoresystemrequirements

Could you please let me know if it is possible? If S3 is not able to be used smartstore with on-prem Splunk deployment, what is the option?

Your help would be appreciated. Thanks.

Labels (1)
Tags (1)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @brandy81,

SmartStore implementation requires high speed access to S3 storage. That is why your only option is using on-premises S3 API-complaint object storage system.

https://docs.splunk.com/Documentation/Splunk/8.1.1/Indexer/SmartStoresystemrequirements#Network_requ... 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok
SplunkTrust
SplunkTrust

Hi @brandy81,

SmartStore implementation requires high speed access to S3 storage. That is why your only option is using on-premises S3 API-complaint object storage system.

https://docs.splunk.com/Documentation/Splunk/8.1.1/Indexer/SmartStoresystemrequirements#Network_requ... 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...