Webinar: Rearchitecting Storage for the Next Wave of Splunk Data Growth

Rearchitecting Storage for the Next Wave
of Splunk Data Growth
For audio playback and Q&A go to: bit.ly/NextSplunk

SPEAKERS
George Crump,
Founder and Lead Analyst
Greg Govatos,
VP, Strategic Partnerships

The State of Splunk
● Rapid Adoption – Analyzes Data
Organizations Already Have
● Users Want to Keep more Data
Available for Richer Analysis
● Driving the Infrastructure Costs
Up

● More Detailed Analysis
● Better Decisions
● Improves Anomaly Detection
● Plenty of Available Compute to
Perform Analysis
The Value of Increasing the Splunk Dataset Size

The Challenges of
Large Splunk
Datasets
● Cost of Storage Capacity
● Scaling Complexities
● Creates Tiering Complexities
● Workarounds

How Splunk SmartStore Enables Splunk
Scalability
Before SmartStore
Goals of SmartStore
SmartStore Architecture
Impact of SmartStore

Requirements of a
SmartStore Storage
Infrastructure
● Modular
● High Data Durability
● Fast Search Even Within
Warm Tier

How Splunk and SwiftStack Work
Together to Make Large Datasets Easy
and Cost Effective

Storage Architecture for a Data-Driven World
Greg Govatos
VP, StrategicAlliances
greg@swiftstack.com

2
Unstructured
data growth of
60–80%
per year
creates
Web-scale
storage needs
Exabytes
80%
20%
Source: IDC
Structured
Unstructured
2010 2015 2020
Data Growth is Compounding the need for Scalable Storage
Video, IoT, Smart City, Gaming, Analytics, Personalized Medicine, Compliance, AI/ML…
The world’s most valuable resource is
no longer oil, but data.
- The Economist

Multi-Cloud Storage and Data Management
Multi-cloud storage and data management for
data-driven applications and workflows
SwiftStack
SwiftStack Storage SwiftStack 1space
On-premises cloud storage
Highest throughput performance
Easy to deploy, operate, and scale
From tens of terabytes to hundreds of petabytes
Spans multiple geographic regions
Proven platform to realize more value from
data!
Multi-cloud data management
Transparent access to a single storage namespace
Public and private infrastructure
Policy-driven data placement
Metadata search across the namespace
Leverage unique services across clouds!
“Visionary
”
2
Unstructured
data growth of
60–80%
per year
creates
Web-scale
storage needs
Exabytes
80%
20%
Source: IDC
Structured
Unstructured
2010 2015 2020
Data Growth is Compounding the need for Scalable Storage
Video, IoT, Smart City, Gaming, Analytics, Personalized Medicine, Compliance, AI/ML…
The world’s most valuable resource is
no longer oil, but data.
- The Economist
3
Multi-Cloud Storage and Data Management
Multi-cloud storage and data management for
data-driven applications and workflows
SwiftStack
SwiftStack Storage SwiftStack 1space
On-premises cloud storage
Highest throughput performance
Easy to deploy, operate, and scale
From tens of terabytes to hundreds of petabytes
Spans multiple geographic regions
Proven platform to realize more value from data!
Multi-cloud data management
Transparent access to a single storage namespace
Public and private infrastructure
Policy-driven data placement
Metadata search across the namespace
Leverage unique services across clouds!
“Visionary”

4
SwiftStack is Scale-Out, Cloud-Ready Storage
Standard x86 Servers
SATA/SAS drives
SwiftStack Software
+ =
BackupsDocuments LogsRich Media
SwiftStack stores and manages unstructured
data sets…
1space
Public Cloud
across private infrastructure
and public clouds

6
Organizations Trust SwiftStack with their Data
10 PB
Multi-Cloud IoT
for Driverless Car AI
50 PB
Mobile User-
Experience data
15 PB
Web-scale photo
content delivery
5 PB
Web-scale asset
delivery
24 PB
Multi-Cloud esports /
gaming platform
8 PB
Enterprise Cloud
Platform
Major Automotive
Manufacturer

7
SwiftStack Storage for Splunk Enterprise
INDEXERS
Compute Servers with SSD
WARM
SCALE-OUT STORAGE
Standard Servers with SATA/SAS
SwiftStack Storage Software
Search
HOT
1space
SmartStore
Verified compatibility
with Splunk Enterprise
Public Cloud
Machine
Data
Powered by SmartStore
ü Reduce Infrastructure Costs
ü Simplify IT Management
ü Boost Data Resiliency
ü Expand Splunk Usage
ü Retain Data Longer
ü Ensure High Search Performance
Cache
Management
S3
interface

8
Splunk SmartStore – Infrastructure Impact
WARM
HOT
HOT
“Classic” Splunk Enterprise
Storage and Compute are tightly coupled
Splunk Enterprise 7.2 with SmartStore
Storage separated from Compute
Ingest Rate = 1TB per day
Retention Period = 365 days
Cache Size = 14 days
Splunk SmartStore
WARM
Scale
Compute
Scale
Storage
Flash Storage = $$$/TB Dense HDD = $$/TB
TCO Savings = 70-75%
Fewer Indexers
Less Flash media

Storageswiss
georgeacrump@storageswiss.com
@storageswiss
storageswiss
THANK YOU
swiftstack.com/splunk
splunk@swiftstack.com
@SwiftStack
SwiftStackVideos

Rearchitecting Storage for the Next Wave
of Splunk Data Growth
For complete audio and Q&A please register for the On Demand Version:
bit.ly/NextSplunk

Webinar: Rearchitecting Storage for the Next Wave of Splunk Data Growth

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Webinar: Rearchitecting Storage for the Next Wave of Splunk Data Growth

Similar to Webinar: Rearchitecting Storage for the Next Wave of Splunk Data Growth (20)

More from Storage Switzerland

More from Storage Switzerland (20)

Recently uploaded

Recently uploaded (20)

Webinar: Rearchitecting Storage for the Next Wave of Splunk Data Growth

Editor's Notes