AEMaaCS | Average volume of logs ingested to Splunk

[kimonp]

Dear all,

We want to setup AEM logs ingestion (AEMaaCS) to a public splunk instance. Is there any indication/benchmark on the volume of such an ingestion, assuming a running vanilla AEM version? E.g. MB (or GB)/day?

Thank you for your time.

[Jagadeesh_Prakash]

Hi @kimonp 

Hope below details are useful

Customers who have Splunk accounts may request via customer support ticket that their AEM Cloud Service logs are forwarded to the appropriate index. The logging data is equivalent to what is available through the Cloud Manager log downloads, but customers may find it convenient to leverage the query features available in the Splunk product.

https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/implementing/develo...

[kimonp]

Hi @Jagadeesh_Prakash ,

My question is actually around the expected ingestion volume, not the how-to part of the ingestion. We need to know the approx. log size to be ingested, as it affects the Splunk licensing.

[nitesh_kumar · Accepted solution]

Hi @kimonp ,

I think it depends on your license, there is no limitation from AEM Cloud AFAIK (It will just forward it). I suppose the free tier of Splunk has some limitations around 500MB.

The network bandwidth associated with logs sent to Splunk is considered part of the customer’s Network I/O usage.

You could check these links for more details:-

https://experienceleague.adobe.com/docs/experience-manager-cloud-service/content/implementing/develo...

https://www.opsinventor.com/using-splunk-for-log-search-monitoring-on-aem-as-a-cloud-service/

If you need to know what log size you have currently generated on your instances which will be forwarded, the best way would be to raise a support ticket.

Hope this helps!

Regards,

Nitesh

[kimonp]

Hi @nitesh_kumar ,

The benchmark I am looking for is essentially "how many MB/GB of logs per day would be ingested to a Splunk instance, assuming I have a running AEMaaCS vanilla environment?". Is there such an indication available?

regards

[Jagadeesh_Prakash]

@kimonp  i guess their is no correct answer for this. As @nitesh_kumar  it all depend on your license, and how frequently you are using the AEM instance.