Splunk Stream

Installation and Configuration Manual

Flow collector performance test results

This page shows performance test results for the Splunk Stream Flow collector. For information on how to configure Flow collector, see Configure Flow collector in this manual.

Testing methodology

As input, Splunk Stream sends a constant stream of NetFlow V9 records at varying bandwidths, to simulate how Stream would perform in a scenario with different number of NetFlow devices sending data to the forwarder. Splunk uses Ixia to generate NetFlow V9 packets over UDP with a fixed destination IP address (the IP address of the target machine - 172.18.1.4, in the example above). Each ethernet frame has 12 netflow records.

Test results

Input Bandwidth 256 Mbps 300 Mbps
Flows/sec (netflow records/sec) 338,704 465,408
CPU % usage 653 960
Memory MB usage 416 440
Last modified on 03 March, 2022
Independent streamfwd (HEC) tests - TCP/UDP aggregation   Stream forwarder sizing guide

This documentation applies to the following versions of Splunk Stream: 8.0.1, 8.0.2, 8.1.0, 8.1.1, 8.1.3


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters