2021 04 30 Splunk Introduction

What is Splunk-Enterprise

splunk-enterprise | Guidance on deploying Splunk Enterprise on Azure with automated reference implementation

This documentation provides detailed guidance to support the deployment of Splunk Enterprise on Azure in line with Splunk Validated Architectures and the following key priorities:

• High Availability
• Maximum Performance
• Security
• Scalability

Background

Customers blocked by lack of support for splunk enterprise on Azure

BlackRock, Tesco, Adobe

Key Issues

• No Azure-specific reference architecture or guidance
• No reference implementation of Splunk Enterprise on Azure
• Splunk SmartStore feture gap compared to AWS and GCP

Demo

• Create Splunk Enterprise
• Github repo: Azure/splunk-enterprise: Guidance on deploying Splunk Enterprise on Azure with automated reference implementation (github.com)
• External storage ( need use S3), Blob storage API/SDK still in progress