Splunk Enterprise Certified Architect — Question 20

What is the expected minimum amount of storage required for data across an indexer cluster with the following input and parameters?

• Raw data = 15 GB per day
• Index files = 35 GB per day
• Replication Factor (RF) = 2
• Search Factor (SF) = 1

Answer options

• A. 85 GB per day
• B. 100 GB per day
• C. 65 GB per day
• D. 50 GB per day

Correct answer: A

Explanation

The expected storage calculation includes both raw data and index files, adjusted for the replication factor. With 15 GB of raw data and 35 GB of index files, the total is 50 GB, which, when accounting for a replication factor of 2, results in a minimum of 100 GB. However, since the search factor is 1, the required amount is effectively halved, leading to the correct answer of 85 GB per day.