SPLK-2002: Splunk Enterprise Certified ArchitectDemo

By Splunk · Question Mode

QuestionQ24

Infrastructure Planning: Resource Planning

Because Splunk indexing has intensive read/write demands, selecting an appropriate disk-storage solution for each deployment is important. Which of the following statements about disk storage is accurate?

  • A High performance SAN should never be used.
  • B Enable NFS for storing hot and warm buckets.
  • C The recommended RAID setup is RAID 10 (1 + 0).
  • D Virtualized environments are usually preferred over bare metal for Splunk indexers.
Explanation

RAID 10 (1+0) combines mirrored disks with striping, delivering both fault tolerance and strong read/write throughput for the I/O-intensive indexing workload. Splunk requires fast local storage for hot and warm buckets and specifically advises against hosting them on NFS; SAN storage remains an option for cold or frozen storage.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!