Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
14 results
Sorted by:
03-11-2014
08:59 PM
5 Karma
...Ms
We are concentrating only on performance for phase 1. In phase 2 we will be providing indexer replication.
My hardware recommendation for phase 1 is:
Deployment Server:
Count - 1
H...
- Tags:
- hardware
- installation
Labels
09-21-2019
02:05 AM
...hould not create any performance issues, when these load of users start using it. We have 3 Search Heads and 4 Indexers in a clustered environment. I need recommendations, on what performance p...
12-01-2013
05:23 PM
The Splunk Distributed Deployment manual gives a summary of recommended numbers of indexers and search heads at
link text for a number of indexing volume and numbers of search users.
I don't u...
10-14-2019
08:20 AM
Hi,
We are sizing a Splunk infrastructure and I was looking at this page :
Summary of performance recommendations
https://docs.splunk.com/Documentation/Splunk/7.3.2/Capacity/Summary...
Labels
- Labels:
-
indexer
-
indexer clustering
-
search head
02-11-2018
01:50 PM
1 Karma
...etrics data are fed from CSV, are there points to consider on when "Metrics" perform better vs when "data model acceleration/report acceleration summary" perform better?
Is the anticipated performance...
02-04-2016
08:08 PM
...entralized deployment into one search head and one indexer each on their own servers. (Look at the Summary of Performance Recommendations document) Is that the case? Or do you need to go to one search h...
12-04-2018
09:35 AM
...00 GB/day). For users I am assuming 20 and searches at 200.
Also, would the value scale linearly per the number of users or correlation searches?
I have used the following performance recommendations...
08-02-2016
10:17 AM
index=bigfix sourcetype=software | eval Hashes_allow_or_deny = if((sha256_allow_or_deny=="*deny*") OR (md5_allow_or_deny=="*deny*") OR (isnull(sha256_allow_or_deny) AND isnull(md5_allow_or_deny)),"Un...
07-07-2015
08:28 AM
Hello,
I am trying to start a new Splunk project. I have 3 sites across the U.S. I would like to implement Splunk. Each site will have around 16 users. Sometimes these users will be concurrent, bu...
01-03-2017
06:34 AM
I found a doc on the Cisco website which specifies an architecture with about 14 UCS servers to index up to 2 TB/day : 8 indexers, plus 3 search head servers, plus three other servers (Master Node, D...
