Splunk Enterprise

Splunk Architecture, How do we know we need how many Search Heads and Indexers.

Rocky31
Path Finder

We have like 5 S.H and 7 Indexers, how i know these numbers, some environments have 10 indexers and more SH, how we will know we need that number,

If anyone understood my question and answers me i will be very thankful to you.

0 Karma
1 Solution

asimagu
Builder

Feel free to play with this tool: https://splunk-sizing.appspot.com/

Besides that, answering your question about your need is not a simple task as it may require a full architecture analysis for the ideal solution

View solution in original post

0 Karma

jcrabb_splunk
Splunk Employee
Splunk Employee

We have a document that can provide general guidance based on our Reference Hardware:

Jacob
Sr. Technical Support Engineer

adonio
Ultra Champion

can you kindly elaborate?
how much data do you index every day? how many users do you have? how many concurrent searches? are your indexers clustered? are your search heads clustered?

Rocky31
Path Finder

Thank for your response, here i want to know how we will figure out, how many SH, indexers we required for our environment. PLEASE TRY TO UNDERSTAND I AM VERY NEW TO THIS TOOL.

0 Karma

asimagu
Builder

Feel free to play with this tool: https://splunk-sizing.appspot.com/

Besides that, answering your question about your need is not a simple task as it may require a full architecture analysis for the ideal solution

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...