Back to Floor
Index Design • Room 3

Storage Architecture

Indexer disk performance is critical. RAID 10 is the recommended configuration for hot/warm storage because it provides both redundancy and high sequential write throughput.

SmartStore offloads warm/cold data to remote object storage (like S3), dramatically reducing local disk requirements while maintaining search performance through a local cache.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)
❤️❤️❤️
Question 1 of 1
Why is RAID 10 recommended for Splunk indexer hot/warm storage over RAID 5?
ARAID 10 is cheaper.
BRAID 10 provides significantly better sequential write performance and faster rebuild times, critical for high-throughput indexing.
CRAID 5 is not supported by Linux.
DRAID 10 uses less disk space.