Greetings,  I have an architectural question about an on-prem to Azure/AWS.  It is a complex question, so I'll try to keep it simple.  Assume you have a very large Splunk footprint 20+ indexers with 48 physical cores, Search heads with 30 cores, etc...   Do you need to create a 1:1 match in a cloud provider or can you use smaller hardware and scale out to save money?  Physical CPUs and vCPUs aren't equivalent so the hardware for a 1:1 match is more expensive.   When I look at Splunk's proposed Azure architecture they use much smaller VMs for indexers (8 core) and scale out.  Looking for thoughts/advice on whether you would move these 1:1 into cloud or rearchitect for a smaller VM size.  I'm leaning toward rearchitecting as cost is a big component of this.  I'm not sure how to equate how many 48 core indexers (on prem) with smaller 8 core vcpu vms though.  I dont think it would be 6 Azure VMs to 1 48 core physical box.  Any advice/thoughts are appreciated.   ... View more