I'd be interested in knowing what problems you had with ELK, if you don't mind sharing.
I understand the ease of splunk, but ELK isn't that difficult if you have some in-house linux skills. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [email protected] web: www.campaignmonitor.com On 19 June 2014 22:48, Thomas Paulsen <[email protected]> wrote: > We had a 2,2TB/d installation of Splunk and ran it on VMWare with 12 > Indexer and 2 Searchheads. Each indexer had 1000IOPS guaranteed assigned. > The system is slow but ok to use. > > We tried Elasticsearch and we were able to get the same performance with > the same amount of machines. Unfortunately with Elasticsearch you need > almost double amount of storage, plus a LOT of patience to make is run. It > took us six months to set it up properly, and even now, the system is quite > buggy and instable and from time to time we loose data with Elasticsearch. > > I don´t recommend ELK for a critical production system, for just dev work, > it is ok, if you don´t mind the hassle of setting up and operating it. The > costs you save by not buying a splunk license you have to invest into > consultants to get it up and running. Our dev teams hate Elasticsearch and > prefer Splunk. > > Am Samstag, 19. April 2014 00:07:44 UTC+2 schrieb Mark Walkom: >> >> That's a lot of data! I don't know of any installations that big but >> someone else might. >> >> What sort of infrastructure are you running splunk on now, what's your >> current and expected retention? >> >> Regards, >> Mark Walkom >> >> Infrastructure Engineer >> Campaign Monitor >> email: [email protected] >> web: www.campaignmonitor.com >> >> >> On 19 April 2014 07:33, Frank Flynn <[email protected]> wrote: >> >>> We have a large Splunk instance. We load about 1.25 Tb of logs a day. >>> We have about 1,300 loaders (servers that collect and load logs - they may >>> do other things too). >>> >>> As I look at Elasticsearch / Logstash / Kibana does anyone know of a >>> performance comparison guide? Should I expect to run on very similar >>> hardware? More? or Less? >>> >>> Sure it depends on exactly what we're doing, the exact queries and the >>> frequency we'd run them but I'm trying to get any kind of idea before we >>> start. >>> >>> Are there any white papers or other documents about switching? It seems >>> an obvious choice but I can only find very little performance comparisons >>> (I did see that Elasticsearch just hired "the former VP of Products at >>> Splunk, Gaurav Gupta" - but there were few numbers in that article either). >>> >>> Thanks, >>> Frank >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "elasticsearch" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit https://groups.google.com/d/ >>> msgid/elasticsearch/ea1a338b-5b44-485d-84b2-3558a812e8a0% >>> 40googlegroups.com >>> <https://groups.google.com/d/msgid/elasticsearch/ea1a338b-5b44-485d-84b2-3558a812e8a0%40googlegroups.com?utm_medium=email&utm_source=footer> >>> . >>> For more options, visit https://groups.google.com/d/optout. >>> >> >> -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/32c23e38-2a2f-4c09-a76d-6a824edb1b85%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/32c23e38-2a2f-4c09-a76d-6a824edb1b85%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEM624Y1eem-s6hD3QLfnKHJdZS2p5jtwO%2ByyMbqbcYDrroH1Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
