SOLUTION PROFILE

Reduce Costs With a Scalable Solution for Unstructured Data

Optimize Splunk With Hitachi Content Platform and SmartStore

Organizations are increasingly realizing the untapped potential in their business data. Machine data

has especially become a key strategic asset, as it holds valuable information about customers,

transactions, fraudulent activity and system behaviors. Larger datasets provide the foundation

for effective analytics. However, as these datasets continue to grow, it becomes challenging for

organizations to cost-effectively manage them. Splunk’s traditional co-located compute and storage

model was designed to help organizations quickly gain the insights that they seek from these massive

datasets. However, the explosive data growth from the internet of things (IoT) has shifted the balance

between compute and storage requirements. Traditional colocation models lack the flexibility to

meet these new storage demands as compute must also be scaled to keep up

with the ever-growing demands for storing machine data. Organizations need a

more efficient and cost-effective solution to address these storage and analytics

challenges for their machine and unstructured data.

https://www.hitachivantara.com

2

Decouple Compute and Storage for Greater Scale and EfficiencyIn today’s era of digital transformation, organizations now recognize that decoupling compute and storage resources in their Splunk environment is the key. This approach allows them to reduce costs while gaining the ability to scale those resources independently for greater efficiency. Delivering performance at scale in this decoupled architecture requires on-demand tiering of data to the most appropriate storage resources to ensure that data continues to be utilized seamlessly and efficiently.

Hitachi Content Platform and Splunk SmartStore: Cost-Effective and Long-Term Machine Data Retention at Scale

Hitachi Content Platform (HCP), an on-premises cloud object storage solution, is a cost-effective, secure and robust storage platform that is purpose-built for scalability, compliance and long-term data retention.

With Splunk SmartStore and HCP, you gain greater flexibility with your compute and storage resources with incredible cost-efficiency and long-term data retention at scale. SmartStore enables you to reserve Splunk’s primary storage resources for hot (actively used) data, and tiers warm and cold data on demand to the Amazon S3-compliant HCP. This approach keeps data seamlessly searchable and retained longer at a much lower cost. As Splunk ingests more data, SmartStore storage can be scaled independently. As Splunk activity increases, performance can be scaled by adding more compute resources. This flexibility greatly simplifies Splunk management and greatly reduces operational costs.

Learn more about Hitachi Content Platform and Splunk.

https://www.hitachivantara.com/en-us/products/cloud-object-platform/content-platform.html?icid=as_us_en_2019063https://www.splunk.com/

3

Reduce Storage Costs With HCP and Splunk SmartStoreReserve primary storage resources for hot (active) data and dynamically tier warm and cold Splunk data to the very cost-efficient HCP. Splunk maintains only a single copy of each warm bucket to reduce overall storage requirements.

HCP delivers over 60% lower total cost of ownership (TCO) versus public cloud alone.

Scale Compute and Storage IndependentlyImprove utilization as you scale Splunk. Decoupling storage from compute means that you avoid adding unneeded compute capacity to keep up with storage demands. As Splunk search activity increases, performance can be scaled by adding more compute resources.

Scale SmartStore storage independently of compute while maintaining fast performance.

Lower Costs and Scale Compute and Storage Independently

■■ Reduce storage costs with HCP and Splunk SmartStore.■■ Scale compute and storage independently.■■ Optimize Splunk resources, maximize performance and gain better insights from historical data.■■ Gain a secure, flexible and cost-effective storage solution for long-term Splunk data retention.

Optimize Splunk Resources and Maximize PerformanceSmartStore optimizes data placement between indexes with an intelligent cache that evaluates data by age and access patterns to determine what data to keep hot and what data to move to HCP.

SmartStore brings data closer to compute on demand, for fast performance and a seamless search experience.

A Secure, Flexible and Cost-Effective Storage Solution HCP provides a long-term cloud object storage platform that is massively scalable. It makes compliance and data recovery easy with data mobility, AES-256 encryption, policy-based tiering to public clouds, robust data protection, and up to fifteen 9s availability.

HCP provides scalable, economical and highly available storage for Splunk.

44

Eliminate Data Protection HeadachesWith fifteen 9’s data durability, erasure coding, replication, configurable redundancy, automatic repair and versioning, HCP is a resilient and self-protecting storage platform. Data moved to HCP does not require any other form of data protection.

Reduce backup burden and enhance Splunk data availability with HCP’s unparalleled data protection.

Maximize the Value of Your Splunk DeploymentMost incidents are detected long after they occur. Retain data for longer periods at much lower costs on HCP, while data remains searchable with SmartStore. Quickly derive insights from valuable historical data for more comprehensive analytics and faster incident resolution.

HCP provides cost-effective, long-term data retention for Splunk with enhanced analytics for better business outcomes.

Simplified Management and Faster Recovery From FailuresAs much of the data no longer resides on the Splunk nodes, you can eliminate much of the Splunk cluster management overhead related to data rebalancing and index maintenance. A node failure requires only metadata replication versus full data replication.

Accelerate recovery from hardware failures and data imbalances. Restore cluster by bootstrapping indexes from HCP.

Decoupling compute and storage is proving to be useful in Big Data deployments. It provides increased resource utilization, increased flexibility, and lower costs.

– Ritu Jyoti, IDC Program Vice President, Artificial Intelligence Strategies, “Five Benefits of Decoupling Compute and Storage for Big Data Deployments”

https://www.idc.com/getdoc.jsp?containerId=US43575418https://www.idc.com/getdoc.jsp?containerId=US43575418

Hitachi’s Experience and Partnerships: Trusted by Data-Driven Innovators EverywhereHitachi Vantara is a well-established global business backed by more than 100 years in operational technology and more than 50 years in information technology experience, and a vibrant ecosystem of partners.

Splunk is one of the most popular solutions in the industry for gaining insights to machine data. As this data grows, the demand for storage quickly outpaces the demand for compute. In a horizontal scale-out model, adding more compute and storage capacity together to satisfy the demand for storage only, creates an inefficient imbalance of resources and becomes expensive very quickly.

Hitachi Vantara and Splunk have partnered to deliver a cost-effective and certified solution to address these challenges. Together, we enable organizations to optimize their Splunk environments, while driving down storage costs and maintaining fast performance for better analytics.

5

HITACHI is a trademark or registered trademark of Hitachi, Ltd. All other trademarks, service marks, and company names are properties of their respective owners.

SP-287-A BTD July 2019

Hitachi Vantara

Corporate Headquarters 2535 Augustine Drive Santa Clara, CA 95054 USA HitachiVantara.com | community.HitachiVantara.com

Contact InformationUSA: 1-800-446-0744Global: 1-858-547-4526HitachiVantara.com/contact

Next Steps

Learn how Hitachi Content Platform makes your data securely available anywhere, anytime.

Read about the power of the Hitachi Content Platform portfolio.

Learn how to use Splunk to gain insights from your machine data.

Hitachi Vantara at a Glance Your data is the key to new revenue, better customer experiences and lower costs. With technology and expertise, Hitachi Vantara drives data to meaningful outcomes.

Check out the resources below to learn how Hitachi Vantara and Splunk work together to enable organizations to optimize their Splunk environments for reduced storage costs and greater efficiency.

https://www.hitachivantara.comhttps://www.facebook.com/HitachiVantarahttps://www.linkedin.com/company/11257500/https://twitter.com/HitachiVantarahttps://www.youtube.com/c/HitachiVantarawww.HitachiVantara.comwww.community.HitachiVantara.comhttps://www.hitachivantara.com/en-us/company/contact.htmlhttps://www.hitachivantara.com/en-us/products/cloud-object-platform/content-platform.html?icid=as_us_en_2019056https://www.hitachivantara.com/en-us/products/cloud-object-platform.html?icid=as_us_en_2019057https://www.splunk.com/