We ran bare metal indexers for years, but we rarely exceeded 30% CPU. This post summarises improvements seen by switching to the Splunk Operator for Kubernetes The full post is available on medium, Splunk Operator for Kubernetes (SOK) — Improvements on the indexing tier, and as a Splunk Lantern article

When creating indexers with the Splunk Operator for Kubernetes (SOK) the assumption is search heads will be within K8s. We managed to get our search heads to run outside K8s The full post is available on medium, Splunk Operator for Kubernetes (SOK) — Indexers on K8s, Search Heads outside the K8s cluster, and also available as a Splunk Lantern article

The SOK is a Splunk-built K8s operator to run Splunk indexer clusters, search head clusters and standalone instances. This article discusses our lessons from production implementation The full post is available on medium, Splunk Operator for Kubernetes (SOK) — Lessons from our implementation, and as a Splunk Lantern article

A performance comparison of ext4 vs XFS on a large scale Splunk enterprise indexer cluster utilising SmartStore on-premise / bare metal The full post is available on medium, Splunk Indexers — ext4 vs XFS filesystem performance, a Splunk Community Blog post, and a Splunk lantern article

Kubernetes storage is crucial for deployments that rely on persistent volumes. This article explores various options available and compares Rook Ceph and Piraeus datastore in depth The full post is available on medium, Kubernetes Storage Performance Comparison Rook Ceph and Piraeus Datastore (LINSTOR)