Splunk Enterprise
Splunk | 6.1.1Linux/Unix, Amazon Linux 2013.09 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
Best monitoring tool
- Leave a Comment |
- Mark review as helpful
Splunk is useful with limitations
Not user friendly,needs training to use the product
user needs to learn database/sql kind-a search methods to search on the product
sometimes can be frustrating
HTTP by default; and no real sizing guidance
i'm an AWS newbie in terms of using AMIs and so on. was first and foremost pretty surprised to see the image using HTTP by default.
also the sizing info for AWS specifically both seem quite dated and "unofficial" as in only in blog form or a one-off PDF versus a proper doc page... so you're left researching and calculating (and guessing) too much on the upside before actually diving in and using the instance.
http://blogs.splunk.com/2012/03/07/splunk-and-aws-sizing-revisited/
http://www.splunk.com/web_assets/pdfs/secure/Splunk_and_Amazon_Web_Services_Tech_Brief.pdf
things like extra storage, clustering, and archiving are really not touched on in any detail in the docs, so we don't use this AMI at all for much more than small tests.
best info we can find beyond that is around cloud formation stack builds, which is a good step in the right direction, but again doesn't seem super authoritative:
https://github.com/splunk/splunk-aws-cloudformation
http://blogs.splunk.com/2014/05/20/deploy-your-own-splunk-cluster-on-aws-in-minutes/
Just three commands
As far as I see this ami is just the amazon AMI but with splunk downloaded and installed and a permissive security group.
In addition Splunk blundled is outdated and there are constrains to the instance size, for example there's no m3.large to choose.