In an existing Splunk environment, the new index buckets that are created each day are about half the size of the incoming data. Within each bucket, about 30% of the space is used for rawdata and…

Question

Options

• ATotal daily indexing volume, number of peer nodes, and number of accelerated searches.
• BTotal daily indexing volume, number of peer nodes, replication factor, and search factor.
• CTotal daily indexing volume, replication factor, search factor, and number of search heads.
• DReplication factor, search factor, number of accelerated searches, and total disk size across cluster.

• A
  2% (1)
• B
  79% (33)
• C
  7% (3)
• D
  12% (5)

Explanation

The additional information that is needed to calculate the daily disk consumption, per indexer, if indexer clustering is implemented, is the total daily indexing volume, the number of peer nodes, the replication factor, and the search factor. These information are required to estimate how much data is ingested, how many copies of raw data and searchable data are maintained, and how many indexers are involved in the cluster. The number of accelerated searches, the number of search heads, and the total disk size across the cluster are not relevant for calculating the daily disk consumption, per indexer. For more information, see [Estimate your storage requirements] in the Splunk documentation.

No community discussion yet for this question.