Splunk Search
Highlighted

Is anyone utilizing deduplication at the storage level (SAN) for Splunk data and how does it perform?

New Member

Is anyone utilizing deduplication on storage arrays for Splunk volumes, and how does it perform?

Tags (3)
0 Karma
Highlighted

Re: Is anyone utilizing deduplication at the storage level (SAN) for Splunk data and how does it perform?

Communicator

We have dedup on our Netapp and no issues, my storage guy is happy with the space saved.

Note this is for our cold storage. For hot/warm you want pure speed, I use a local raid 10 array there.

0 Karma
Highlighted

Re: Is anyone utilizing deduplication at the storage level (SAN) for Splunk data and how does it perform?

SplunkTrust
SplunkTrust

What is your goal?

You will benefit from space savings only for replicated buckets (index replication).

The buckets themselves, as they are already compressed with gzip, will not-dedup very well, if at all.

Highlighted

Re: Is anyone utilizing deduplication at the storage level (SAN) for Splunk data and how does it perform?

New Member

No real goal in mind, just a curiosity. Our environment will be growing soon, so the R5 LUN (very low search usage, so R10 was not needed) will need to be changed to R10. With change in storage, we have option to move system and utilize a NetApp device with Dedupe. I am just looking at options. It seems like this is not one.

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.