Splunk Cloud performance considerations
Splunk Cloud provides a high performance solution for customers. Every Splunk Cloud subscription plan is provisioned with adequate compute capacity. Because search workloads can vary considerably, subscription plans with peak daily ingest of 1000 GB and greater are guaranteed allocation of Splunk Virtual Cores as defined below.
A Splunk Virtual Core (SVC) is a unit of capabilities in Splunk Cloud that includes compute, memory, and I/O resources. SVCs are allocated to your subscription plan based on your average daily ingest, up to the maximum of 1 SVC for every 10 GB of licensed peak daily ingest. Purchase of Splunk Enterprise Security Premium Solution provides incremental SVC allocation of 1 SVC for every 20 GB of licensed peak daily ingest. Purchase of Splunk IT Service Intelligence Premium Solution provides incremental SVC allocation of 1 SVC for every 20 GB of licensed peak daily ingest.
The ratio of allocated SVC to licensed peak daily ingest level is subject to change with the evolving infrastructure and architecture of the service. Splunk Cloud establishes SVC performance using a Splunk Search Benchmark to ensure that new ratios continue to provide the same or better levels of performance.
This documentation applies to the following versions of Splunk Cloud™: 7.1.3, 7.2.4, 7.2.6, 7.2.7, 8.0.2001, 8.0.2003, 8.0.2004