Hi to all,
I'm sizing a Splunk architecture, I'm trying to know how data encryption and compression impact on performance.
For example, if I enable data compression and encryption, do I need to size CPU to x % higher?
Thanks,
Andrea
Hi,
Can I point you to: https://splunk-sizing.appspot.com/
The compressed rawdata file is roughly 15% of the incoming , pre-indexed raw data. So based on that number you can apply the normal sizing.
I don't think that encryption impacts performance in terms of CPU to x % higher.....
Usually both compression and encryption decrease system performance, I should calculate in Splunk how much performance decrease (if they decrease).