Hi,
I need to keep about 6 months of searchable data in the splunk environment which i am working with.
The average daily rate is 25GB/day and i have calculated the max index size through this way:
25GB * 180 days = 4500GB / 3 + 50GB = 1550000
So, to meet the retention needs, the max index size should be set to ~1.5TB.
Is this information correct?
Thanks!
Marcio
... View more