Hello, I have a hardware architecture for my Splunk INDEX as follows:
8 CORES Xeon 2.4GHZ and 40GB RAM
And for my SEARCH HEAD
8 CORES Xeon 2.4GHz and 8GB RAM
I'm upgrading to 55GB daily, and I wonder if this will be ideal architecture below:
SPARC T5 16 CORES 3.6GHz 48GB RAM
From a distance, I don't think your proposed hardware is "ideal" but you know your environment much better than I do. For your reference, the reference hardware is identified below in the attached link.
http://docs.splunk.com/Documentation/Splunk/6.2.1/Capacity/Referencehardware