Hi, We are currently considering deploying a small Splunk Enterprise platform on AWS. Details: 10G/d of ingestion Less than 10 users The data is not "time-framed", as we collect data and sends it from time to time. The platform will mostly be used for analysts' searches & queries. I've read about SmartStore, which is supposed to be cheaper, though slower. I also understand that it caches data/buckets mostly by time. How slower would it be, comparing to EBS storage, and would you suggest using it for warm data? Much Appreciated.
... View more