Starting with version 7.2, Splunk Enterprise contains a data management enhancement called SmartStore, which separates the compute and storage tiers in a Splunk deployment. With SmartStore, a Splunk infrastructure is right-sized to the workload, and both compute and storage resources can be configured and scaled independently. Further, as data ingest rates increase and data retention periods lengthen, SmartStore allows growing volumes of Splunk data to be stored at a lower cost (up to 75% less).
SwiftStack is a Splunk technology partner whose storage system is verified for compatibility with Splunk SmartStore, and can be built using standard servers.
As terabytes become petabytes, every Splunk shop will require the optimization that SmartStore delivers. This session will feature a technical deep-dive on SmartStore, including:
- SmartStore's architecture and data flows
- How to size compute and storage for SmartStore
- How searches work and perform against SmartStore-enabled indexes
- How Indexer cluster management is simplified with SmartStore
- How to integrate SmartStore into the current Splunk environment
There will also be a demo to illustrate how easy it is to enable and use SmartStore.
Eric Rife is a data center infrastructure expert with extensive experience in both the commercial and public sector markets. He is also a Splunk Certified Admin. Eric leads the System Architect team at SwiftStack and is based in Northern Virginia.
IMPORTANT - All visitors MUST register at the security desk and provide a valid and current govt. issued ID.
There is ample (outside) visitor parking spots along the driveway and main entrance of the building. The area is marked as ‘Visitor Parking’. Garage parking WILL NOT BE AVAILABLE since it requires badge/card access.