Configure performance metrics collection
Manage data volumes for your deployment
Control the type and quantity of data that comes into the Splunk App for VMware. Collecting the correct type of data and limiting the quantity of data that you collect are important because data volumes can affect your licensing requirements.
Typically, Splunk App for VMware collects approximately 300MB of data per host per day.
See "Data volume requirements" in this topic for information on how to calculate the estimated peak data volume for your environment.
As a systems administrator, you can limit data volume in the following ways.
- Reduce the number of hosts from which you collect data.
- Reduce the number of performance metrics you collect.
- Use NullQueue to filter log data.
Data volume requirements
Test results show that you can expect to collect approximately 300 MB of data per host per day from your environment. This number varies depending on the volume of log data you collect and the number of virtual machines that reside on a host. In a typical environment this number lies between 250MB-350MB. See the information below for further details.
|Collected data type||Data volume|
|Total vCenter logs||15 MB of data per host per day per vCenter. For example, 750MB in a 50 host environment.|
|ESXi host logs||185 MB of data per host per day. (In a typical environment this number can range from 135MB to 235M of data, but it can vary widely depending on your environment).|
|Total API data per host||10 MB of data per host per day.|
|Total API data per virtual machine||3 MB of data per day,|
Filter log data collection
Configure data collection for hosts
This documentation applies to the following versions of Splunk® App for VMware (Legacy): 4.0.4