Splunk Sizing

In this post, I am going to discuss about the space capacity planning of Splunk Cluster. This post is useful when you are planning to set up the cluster.

The below site is created by Robert Fujara to calculate the storage required to set up the cluster.

https://splunk-sizing.appspot.com

The above site may not predict the exact size as it is not considering the summary index, data model acceleration but you will get the idea of minimum size you required to set up the cluster.

Let’s get it in to more details.

There are few basic information which you need to be provide to calculate the storage, they are

  • Daily volume of data
  • Data retention of Hot, Warm, Cold and Frozen buckets
  • Number of Indexers
  • Search and Replication Factor

You can drag to select these details and based on the selected value, it will give the required storage which you need to require per indexer.

The result looks like…

Another useful feature of this site is that it can give the example of configurations which you need to put in the indexes.conf file for the selected parameters.

Visit the site and play around to get more details. Happy Splunking…!

Leave a comment