Because Splunk indexing is read/write intensive, it is important to select the appropriate disk storage solution for each deployment. Which of the following statements is accurate about disk storage?
A.
High performance SAN should never be used.
B.
Enable NFS for storing hot and warm buckets.
C.
The recommended RAID setup is RAID 10 (1 + 0).
D.
Virtualized environments are usually preferred over bare metal for Splunk indexers.
C
Since this is focused on indexer performance, A can be ruled out because SAN is one of the faster storage technologies available. B can be ruled out because hot buckets need the fastest performance possible, and NFS is relatively slow (it usually runs over non-dedicated networks that are slower than those used by SAN). C is valid because it is a performance option - RAID 10 is faster than RAID5/6 while providing better redundancy. D can be ruled out because virtualized environments will always give lower raw performance than bare metal (despite having other advantages).
I forgot to mention that the tradeoff for the ease of using Virtualized environments is a slight performance hit that is introduced in the abstracting the hardware layer. So Bare Metal will always have high performance.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Proctor
6 months, 2 weeks agoRedtonyeah
1 year, 2 months agomanu78
2 years, 1 month agoioana5
2 years, 1 month agoscostic
2 years, 3 months agobrettw
7 months, 4 weeks agobrettw
7 months, 4 weeks ago