All Apps and Add-ons

bonnie++ -- anything Splunk Specific?

tim_snider
Explorer

Maybe I'm confused - but I don't think so in this case. I'm familiar with benchmarking both file system and disk (raw device) performance in Linux and Windoze. bonnie measures file system performance of a server - Splunk indexer (or other components) don't "HAVE" to be loaded on the node to test file system performance. I assume Splunk wanted consistent reporting so they could've chosen any other file system benchmark - iozone, vdbench, iometer... They settled on bonnie++ which is fine. I wanted to be sure that there was something Splunk specific in running bonnie++ without Splunk being loaded on a node that would be used as an indexer.
Thx.

Tags (1)
1 Solution

phoffman_splunk
Splunk Employee
Splunk Employee

I am not sure I understand your question. Splunk has referenced using bonnie++ to gauge IOps performance so you can get a grasp of how well your splunk servers will perform (mainly discussed when referring to indexing performance).

If that is what you are referencing; When getting a measure of IOps you do not need splunk installed to eval your disk read/write performance.

http://wiki.splunk.com/Community:HardwareTuningFactors

View solution in original post

phoffman_splunk
Splunk Employee
Splunk Employee

I am not sure I understand your question. Splunk has referenced using bonnie++ to gauge IOps performance so you can get a grasp of how well your splunk servers will perform (mainly discussed when referring to indexing performance).

If that is what you are referencing; When getting a measure of IOps you do not need splunk installed to eval your disk read/write performance.

http://wiki.splunk.com/Community:HardwareTuningFactors

tim_snider
Explorer

That's fine -- thanks for the response -- I wanted to make sure I wasn't missing something obvious.
Tim

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...