Introduction to Splunk Validated Architectures

Splunk Validated Architectures (SVAs) are trusted reference architectures for stable, efficient and repeatable Splunk deployments. Many of Splunk's existing customers have experienced rapid adoption and expansion, leading to certain challenges as they attempt to scale. At the same time, new Splunk customers are increasingly looking for guidelines and vetted architectures to ensure that their initial deployment is built on a solid foundation. SVAs have been developed to help our customers with these growing needs.

Whether you are a new or existing Splunk customer, SVAs are helpful tools to assist you with building an environment that is easier to maintain and simpler to troubleshoot. SVAs are designed to assist you with achieving the best possible results while minimizing your total cost of ownership. Additionally, your entire Splunk Platform can be deployed in a repeatable manner to help you scale your deployment as your needs evolve over time.

SVAs offer topology options that consider a wide array of organizational requirements, so you can easily understand and find a topology that is right for your requirements. The Splunk Validated Architectures selection process will help you match your specific requirements to the topology that best meets your organization's needs. If you are new to Splunk, we recommend implementing a Validated Architecture for your initial deployment. If you are an existing customer, we recommend that you explore the option of aligning with a Validated Architecture topology. Unless you have unique requirements that make it necessary to build a custom architecture, it is very likely that a Splunk Validated Architecture will fulfill your requirements while remaining cost effective.

It is always recommended that you involve Splunk or a trusted Splunk partner to ensure that the recommendations in this document meet your needs.

If you need assistance implementing a Splunk Validated Architecture, contact Splunk Professional Services.

What's New?

Welcome to the new home of the Splunk Validated Architectures where you will find an ever growing catalog of modules that contain best practice architectures and approaches. Along with a new home and format, the SVA program has been relaunched with a renewed focus on making you successful in your Splunk journey.

The SVA relaunch seeks to deliver all the benefits of the original SVAs (published as a PDF on the Splunk corporate website) and improve upon them in the following ways.

• Modular: Topics are self contained in modules that can be used on their own or pieced together to satisfy more complex requirements and use cases.
• Community oriented: Feedback on the material is now captured from the broader Splunk community for review and incorporation to help keep the content up to date with the latest guidance.
• Expanded: New modules, architectures, and approaches to help scale your Splunk software deployment.