What additional information is needed to calculate the daily disk consumption, per indexer, if indexer clustering is implemented?

In an existing Splunk environment, the new index buckets that are created each day are about half the size of the incoming data. Within each bucket, about 30% of the space is used for raw data and about 70% for index files.

What additional information is needed to calculate the daily disk consumption, per indexer, if indexer clustering is implemented?
A . Total daily indexing volume, number of peer nodes, and number of accelerated searches.
B . Total daily indexing volume, number of peer nodes, replication factor, and search factor.
C . Total daily indexing volume, replication factor, search factor, and number of search heads.
D . Replication factor, search factor, number of accelerated searches, and total disk size across cluster.

View Answer

Answer: B

Explanation:

The additional information that is needed to calculate the daily disk consumption, per indexer, if indexer clustering is implemented, is the total daily indexing volume, the number of peer nodes, the replication factor, and the search factor. These information are required to estimate how much data is ingested, how many copies of raw data and searchable data are maintained, and how many indexers are involved in the cluster. The number of accelerated searches, the number of search heads, and the total disk size across the cluster are not relevant for calculating the daily disk consumption, per indexer. For more information, see [Estimate your storage requirements] in the Splunk documentation.