Solved

Splunk on Nutanix

  • 9 March 2021
  • 1 reply
  • 100 views
R

Hi,

We are planning to move to Nutanix in our organization. One of the application that is in the scope of this project is Splunk. We are a small environment and our Splunk data intake is around 30GB/day and the setup is mainly used as a SIEM.

We have received a few recommendation to isolate Splunk to a separate cluster. Is this necessary, or can we have it on the same cluster if we could guarantee the availability of resources for it? The cluster will host a few application and some infrastructure component like AD and DNS.

Are there any major benefits if we isolate Splunk in a different cluster?

icon

Best answer by Sudhir9 15 March 2021, 18:15

View original
This topic has been closed for comments

1 reply

Sudhir9
Rank
Userlevel 2
Badge +4

Hello @RamiS

Thank you for posting your question to Nutanix Communities. I understand your Splunk requirements is primary however resource consumption is not very high.

Though I can answer your question in a yes or no, I would like you to go through our Splunk best practice Document, this will clear your doubt as well as give you more clarity on why Splunk on Nutanix is even better idea.

Sudhir
Terms & Conditions