Splunk Enterprise

Splunk Enterprise

Apeiron’s NVMe over Ethernet architecture is ideal for a variety of scale-out, high performance computing, and parallel storage applications. Applications like the core Splunk Enterprise—and extended products.

Security (ES), Splunk IT Service Intelligence (ITSI), and Splunk User Behavior Analytics (UBA) —are designed to ingest and allow queries on petabytes of machine, and network data. Due to I/O performance limitations searchable data is often constrained and passed onto alternate offline storage solutions as it ages. This dramatically limits the value of the data.

Slow I/O performance means data must be spread across additional servers to provide query SLA performance. Critical applications like the Enterprise Security module in Splunk must be turned off, or run fewer times per day. This creates more corporate exposure to attacks and means intrusions take much longer to analyze. These issues also extend the time required to stand up new Splunk installations as Splunk certified engineers report that 80% of their time is spent today on performance tuning due to storage equipment performance inadequacies.

Over the last several years non-volatile memory pricing has gone down by 4x while the SSD sizes have grown greater than 10x. This enables Splunk environments to keep months, or even years of data active in a cost-effective manner. With the entire drive performance presented to application servers, we have demonstrated query improvements by up to 90x while accessing multiple years of data, and while cutting the number of servers used by up to 80%.

See the Apeiron Reference Architecture for Splunk document for details.

Splunk Benchmark Testing Against Splunk Reference Architecture

In the News

Apeiron joins the Carbon Black Integration Network

"The Carbon Black Integration Network enabled Apeiron to quickly execute upon customer requests for an externally attached NVMe storage platform," said Chief Revenue Officer at Apeiron Data Systems."

A Few of Our Customers