Data Volume Calculator for Splunk

There are several methods one can use to determine the average volume per host, this is another one. We wrote this one with the Unix and Windows TAs in mind. Here is how you use it: 1) Index data from a good number of hosts, to get a better average. 2) Configure the TAs on those hosts with everything enabled that you think you might want. 3) Collect data for a week or longer, to get a better average. 4) Use the multi-select form options in this App to: a. Select any number of indexes to analyze b. Remove outlier hosts c. Remove sources that you are no longer interested in The result is an "Average DAILY Data Ingestion per Host" panel that will allow you to plan for your future expansion. But wait, how do you configure this App? There are no configuration step, just install the App on a Search Head and you are off to the races. This App was co-developed by James Donn and Franco Ferrero Poschetto.