The Performance of Splunk
This appendix contains an overview of Splunk’s performance as it relates to indexing, search, distributed search, and the effect of disk speed on searches. We also suggest some ways of gaining a better understanding of your Splunk environment, including search heads.
Types of Searches
We must start this appendix with a stern warning that performance cannot be generalized or extrapolated from other similar systems. No matter how much you think your application looks like another one, or the same one running in another place, you will not get close to extrapolating the performance. As a matter of fact, your ...