Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below
Splunk Enterprise on Dell PowerFlex rack using PowerScale
Revisions Acknowledgements Executive summary Introduction Product overview Splunk distributed clustered deployment
Splunk distributed clustered deployment
Virtualization design
Compute design
Storage design
PowerScale storage design
Network architecture
Splunk Enterprise clustered deployment design
Validation Conclusion Appendix A Appendix B: Technical support and resources

Storage design

Storage design

  • Following table describes the PowerFlex storage design. Multiple storage volumes have been carved out on the PowerFlex and PowerScale, these are mapped to Splunk Virtual machines.

    Table 4.              Storage design consideration

    Instance role 

    Quantity

    Operating System storage (GB)

    Hot/warm bucket storage (TB)

    Cold bucket storage (TB)

    Search Head

    1

    300 

    0

    0

    Indexer

    2

    300 

    1

    3

    Cluster master

    1

    250 

    0

    0

    Forwarder

    1

    250 

    0

    0

    Note 1: For this configuration, Splunk sizer recommends 750 GB per indexer for hot/warm data retention, but for this solution, 1 TB has been provisioned per indexer.

    Note 2: For this solution, PowerScale cold data buckets have been carved out for four months retention period. But customers can configure it based on their needs and allocate storage appropriately.