Hi, i’m currently working on a project for a customer who runs their entire infrastructure on Proxmox. One of their services is a SIEM solution using Splunk, deployed on 2 pre-configured servers with a hardware RAID 5 SSD array for virtual machine storage. Since Splunk is highly dependent on IOPS performance, i’m facing a challenge in choosing between LVM and LVM-thin, as they require the ability to snapshot VM instances, but standard LVM doesn’t support that.
Storage Type for Splunk Infrastructure on Proxmox
- Thread starter Ronan311
- Start date
If you are using hardware raid, then you format it as lvm-thin by default(i usually do). Then you create Splunk on top of that. But why raid5 instead of raid10, much more IOPS you get from that.
Local for hot/warm data, i'll have an external storage (ceph) for cold and archived
Due to resource constraints, there are only seven SSD bays in total. Two of them are 480GB SSDs used for the Proxmox OS (RAID 1) and the remaining drives are configured as RAID 5 for VM storage (1.6TB SSDs each) followed by our tech lead suggestion