All,
What are my hardware recommendations for a HEC? How many instances would I need for say 24gigs of logs a day? Didn't seem like much so I am thinking 2 VMs at 12CPU/12gigss ram?
Thoughts? Any docs I should be reading here?
Hey daniel333,
You can refer this document: Recommended hardware in the Installation Manual. http://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Recommended_hardw...
Also below is the link for splunk sizing: https://splunk-sizing.appspot.com/
You can use single instance and if you are looking for high availability of data then refer this link as well for clustered environment: http://docs.splunk.com/Documentation/Splunk/latest/Indexer/Updatepeerconfigurations
Hope this helps!!!
