I've been hunting around, and see several references to using one indexer per 100-250 GB/day (holding server variables config constant). Regardless, I would trust the CISCO doc as the reference platform design (so 14 servers for up to 2 TB/day), but the CISCO design still means per indexer performance is about 7,500 EPS. Moreover, I have verified that the CISCO reference doc does NOT specify an HA config, so that $500,000 hardware config for my 1.5 TB/day need just went up by at least 2x. There has got to be a more robust and cost effective solution.
... View more