解决了

Splunk Nutanix上

  • 2021年3月9日
  • 1回复
  • 34岁的观点
R

你好,

我们正计划在我们的组织中转移到Nutanix。在这个项目范围内的一个应用是Splunk。我们是一个小环境，我们的Splunk数据摄入量大约是30GB/天，设置主要用作SIEM。

我们收到了一些建议，将Splunk隔离到一个单独的集群中。这是必要的吗?或者，如果我们能够保证它的资源可用性，我们可以将它放在同一个集群上吗?该集群将托管一些应用程序和一些基础设施组件，如AD和DNS。

如果我们将Splunk隔离在一个不同的集群中，会有什么主要的好处吗?

图标

最佳答案Sudhir92021年3月15日18:15

Hello\u00a0@RamiS<\/user-mention><\/p>

Thank you for posting your question to Nutanix Communities. I understand your Splunk requirements is primary however resource consumption is not very high.<\/p>

Though I can answer your question in a yes or no, I would like you to go through our Splunk best practice Document, this will clear your doubt as well as give you more clarity on why Splunk on Nutanix<\/a> is even better idea.<\/p>","className":"post__content__best_answer"}">

查看原始
Hi,<\/p>

We are planning to move to Nutanix in our organization. One of the application that is in the scope of this project is Splunk. We are a small environment and our Splunk data intake is around 30GB\/day and the setup is mainly used as a SIEM.<\/p>

We have received a few recommendation to isolate Splunk to a separate cluster. Is this necessary, or can we have it on the same cluster if we could guarantee the availability of resources for it? The cluster will host a few application and some infrastructure component like AD and DNS.<\/p>

Are there any major benefits if we isolate Splunk in a different cluster?<\/p>","quoteUsername":"RamiS","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

本主题已关闭供评论

1回复

Sudhir9
Userlevel 2
徽章 ＋４

你好 @RamiS

谢谢你把你的问题发到Nutanix社区。我知道你的Splunk需求是首要的，但是资源消耗不是很高。

虽然我可以用“是”或“不是”来回答你的问题，但我希望你仔细阅读我们的Splunk最佳实践文件，这将消除你的疑虑，并让你更清楚地了解为什么Splunk Nutanix上这是个更好的主意。

Sudhir
Hello\u00a0@RamiS<\/user-mention><\/p>

Thank you for posting your question to Nutanix Communities. I understand your Splunk requirements is primary however resource consumption is not very high.<\/p>

Though I can answer your question in a yes or no, I would like you to go through our Splunk best practice Document, this will clear your doubt as well as give you more clarity on why Splunk on Nutanix<\/a> is even better idea.<\/p>","quoteUsername":"Sudhir9","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Baidu