Splunk on Nutanix | Nutanix Community
Skip to main content
Solved

Splunk on Nutanix

  • March 9, 2021
  • 1 reply
  • 126 views

Hi,

We are planning to move to Nutanix in our organization. One of the application that is in the scope of this project is Splunk. We are a small environment and our Splunk data intake is around 30GB/day and the setup is mainly used as a SIEM.

We have received a few recommendation to isolate Splunk to a separate cluster. Is this necessary, or can we have it on the same cluster if we could guarantee the availability of resources for it? The cluster will host a few application and some infrastructure component like AD and DNS.

Are there any major benefits if we isolate Splunk in a different cluster?

Best answer by Sudhir9

Hello @RamiS

Thank you for posting your question to Nutanix Communities. I understand your Splunk requirements is primary however resource consumption is not very high.

Though I can answer your question in a yes or no, I would like you to go through our Splunk best practice Document, this will clear your doubt as well as give you more clarity on why Splunk on Nutanix is even better idea.

View original
Did this topic help you find an answer to your question?
This topic has been closed for comments

1 reply

Sudhir9
Nutanix Employee
Forum|alt.badge.img+4
  • Nutanix Employee
  • 62 replies
  • Answer
  • March 15, 2021

Hello @RamiS

Thank you for posting your question to Nutanix Communities. I understand your Splunk requirements is primary however resource consumption is not very high.

Though I can answer your question in a yes or no, I would like you to go through our Splunk best practice Document, this will clear your doubt as well as give you more clarity on why Splunk on Nutanix is even better idea.