Splunk Infrastructure Sizing Calculator

01 Environment

Clustered Standalone

Search Head Clustering

02 Ingestion Daily Total Ingestion GB / day Daily Syslog Ingestion GB / day Auto-set to 30% of total until you edit it. No. of Agents (UFs) forwarders Sizes the Deployment Server. Defaults to the daily-ingestion number until you edit it.

03 Resilience

Replication Factor RF Search Factor SF

04 Retention Days in Warm Storage SSD · days Data Retention (Total) days Archival After Retention days

05 Usage Type

Low~100 scheduled searches, no data-model acceleration, <10 daily users Medium~300 scheduled searches, CIM data-model acceleration, 10+ daily users High~1000 scheduled searches, data-model acceleration, 100+ daily users

Recommendation

Enter your daily ingestion to generate a sizing recommendation.