Search head disk space requirements

[cafissimo]

Hello, please, I would like to know why, for a search head that is on top of two splunk indexers indexing 300 gb/day of data, documentation (http://www.splunk.com/base/Documentation/4.2/Installation/CapacityplanningforalargerSplunkdeployment) says that "2 300 gb hard disks" are needed. Thanks in advance and best regards.

Luca Caldiero Consoft Sistemi S.p.A.

[gkanapathy]

A search head really doesn't.

[MuS · Accepted solution]

Hi cafissimo

a search head needs CPU power more then IO throughput; that's why 2 local disks are enough. the more CPU cores you have in the search head, the more concurrent searches can be run on it.

regards, MuS