The EC2 instance alone comes to $6,447 for 36 months of usage, or $179/month over 3 years. The lowest instance prices in AWS are for a 3-year term, all upfront. Let’s see what we can do to reduce the cost. This alternative, without any data transfer costs (which are not completely unavoidable, but for the sake of this example are minimal) ends up being $939.76 per month with on-demand pricing. Storage for 90 days of logs ( ~4.4TB of space).Storage for our OS (for this example, 20GB).AWS c5.4xl Linux instance (16 vCPU, 32GB of RAM) – Note: We’re assuming that Splunk Enterprise security is not in use here, as we’d need at least a c5.9xl in that case.I would quickly like to note here that it’s not cheaper to deploy an entirely new Splunk environment to only save money on AWS data transfer costs.īuilding a Splunk instance that can be hosted entirely within AWS and handle 100GB/day in AWS logs will consist of the following: Now, let’s say you’re wondering if a better alternative would be to deploy a separate Splunk environment to receive any AWS logs, to keep all the data transfer for that entirely within AWS.
We’re not considering potential overhead in transmission for this, so the actual cost may end up being somewhat higher, but this should be close enough for an estimate. This works out to being around 3TB of data a month, or $276.39 in data transfer costs per month.
To make this math easier for the following example, let’s assume you’re collecting 100GB/day in logs from AWS. If you’re a smaller Splunk customer, this could end up being a significant amount of your daily license. This equates to less than 35GB/day of log volume. That means transferring 1TB of data over a month would end up costing $92.07. Let’s Look at a Real-World ExampleĪt the time of this writing (July 2019), the cost to transfer up to 10TB/month out of the US East 2 (Ohio) region of AWS is $0.09 per GB (inbound transfer to AWS is free). The truth is, however, it’s really not that big of a deal when compared to the overall cost of your cloud deployment, and you can spend a lot more money trying to reduce this cost. This brings me to the main question of this blog post, which I hope to answer: How Do We Deal with Transfer Fees?īecause of budgeting concerns, many people are worried about uncontrolled spending regarding transfer fees, and so they try to come up with ideas to reduce this. There are plenty of mechanisms to accomplish this, and I’m not going to go into all of them in detail here, but all of them are fundamentally similar in that the end result is a data transfer from the cloud provider to the Splunk instance. Once you have a cloud presence, you’ll want to collect logs from those cloud systems or from the cloud platform itself. We’ve seen the usage of cloud computing platforms expand significantly over the years, and now it’s gotten to the point where nearly everyone has at least some cloud presence.
0 kommentar(er)
