Splunk® has become a mission critical application. Thousands of organizations are gaining insight from their machine data and transaction logs using Splunk, and many more are planning to deploy Splunk. No matter what stage you’re in, having guidelines to follow can help improve the Splunk experience. Since a mission critical data application deserves a mission critical data platform, Pure Storage® built the solution on the Pure FlashStackTM converged infrastructure solution. FlashStack is a joint offering from Cisco® and Pure Storage.
This paper is intended to provide a framework for designing and sizing a high-performance, scalable, and resilient Splunk platform. Pure Storage is a leading all-flash array provider focused on reducing storage complexity while improving Splunk performance, resiliency, and efficiency.
To assure that your Splunk platform is sized appropriately, Pure Storage tested Splunk Enterprise on Pure’s FlashStack platform.
The top takeaways from these efforts are that FlashStack for Splunk can:
• Lower management costs by up to 90%
• Reduce data center footprint, power, and cooling by up to 10x compared to legacy storage solutions
FlashStack for Splunk describes architecture and deployment procedures for Splunk Enterprise at scale based on a distributed deployment model. This reference architecture also provides guidelines for right-sizing Splunk storage requirements. We detail configuration of the hardware and software components involved, provide various testing results, and offer implementation and best practices guidance.
