All Apps and Add-ons

Running Splunk on AWS Graviton A1 EC2 instances

avery2007
Explorer

Just curious if anyone is running Splunk on one of the new AWS A1 EC2 instances that run the Graviton processor. Splunk recommends the use of 64-bit Intel processors but considering the cost savings I am really interested in seeing if Splunk works on a Graviton processor from AWS. If you are using one can you tell me your experience with it and any recommendations you might have? Thanks.

0 Karma
1 Solution

ericg_splunk
Splunk Employee
Splunk Employee

Splunk does support the Universal Forwarder on ARM 32-bit processors.
https://www.splunk.com/en_us/download/universal-forwarder.html#

Please vote for the ARM 64-bit Universal Forwarder here:
https://ideas.splunk.com/ideas/APPSID-I-35

Also see this post:
https://answers.splunk.com/answers/580188/splunk-arm64-download.html

View solution in original post

maat
Engager

It would be nice to see how Splunk(not UF) performs on ARM - an addition to AWS, Oracle is also offering its own arm processors (Ampere) on the cloud and having an option over Intel based cpus would be nice.

0 Karma

ericg_splunk
Splunk Employee
Splunk Employee

Splunk does support the Universal Forwarder on ARM 32-bit processors.
https://www.splunk.com/en_us/download/universal-forwarder.html#

Please vote for the ARM 64-bit Universal Forwarder here:
https://ideas.splunk.com/ideas/APPSID-I-35

Also see this post:
https://answers.splunk.com/answers/580188/splunk-arm64-download.html

amiracle
Splunk Employee
Splunk Employee

Splunk does not officially support running on ARM based processors : https://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements . While there was a forwarder for Raspberry Pi, that package has been deprecated since it only ran on Splunk 6.x.

If cost is an issue, you might want to run your Splunk instances on T2/T3 instance types and setup a spot cluster in AWS.

Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...