Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk Indexer hardware uplift: How to make best use of low end servers and high end servers?

$
0
0
Currently our Indexers are quite old and have 32GB RAM and 12 Cores. The new servers have 256GB RAM and 32 cores. So its about 3x times powerful than the old hardware. But unfortunately, its just adding few new servers only, hence have to maintain the old inventory. We have indexer and Search cluster with replication factor of 2 on multisite So looking ahead, I feel the new servers and old servers will have equal data and hence equal load (search & indexing) which is NOT ideal Is there anyway, we can make most of new powerful hardware? - I thought of adding extra entry for Forwarders to send 2 times data to new indexers. But unfortunately, the replication factor will normalise it same across the rest of servers. So not sure, if this will provide benefit - Parallelization settings. Can it be done on "selected servers" in a cluster? - Any other ideas?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>