Splunk Architecture, How do we know we need how many Search Heads and Indexers.

[Rocky31]

We have like 5 S.H and 7 Indexers, how i know these numbers, some environments have 10 indexers and more SH, how we will know we need that number,

If anyone understood my question and answers me i will be very thankful to you.

[jcrabb_splunk]

We have a document that can provide general guidance based on our Reference Hardware:

• Summary of Performance Recommendations.

[adonio]

can you kindly elaborate?
how much data do you index every day? how many users do you have? how many concurrent searches? are your indexers clustered? are your search heads clustered?

[Rocky31]

Thank for your response, here i want to know how we will figure out, how many SH, indexers we required for our environment. PLEASE TRY TO UNDERSTAND I AM VERY NEW TO THIS TOOL.

[asimagu · Accepted solution]

Feel free to play with this tool: https://splunk-sizing.appspot.com/

Besides that, answering your question about your need is not a simple task as it may require a full architecture analysis for the ideal solution