A Splunk dashboard for forecasting storage requirements in Splunk Cloud DDAA (Dynamic Data Archive) and DDAS (Dynamic Data Active Searchable) deployments. Helps capacity planning by projecting storage needs based on current ingestion rates and retention policies.
dashboard.xml-- Splunk form dashboard (DDAA/DDAS Projections (With Calc Table))Screenshot.png-- dashboard screenshot
- Current Configurations panel -- shows per-index DDAS/DDAA retention, current usage, 30-day ingestion totals, daily ingest rate, and projected storage needs
- DDAA/DDAS Forecasting Tool -- interactive calculator to model retention changes per-index and see projected storage impact
- Storage blocks toggle -- optional view showing storage in 500 GB block increments
- Internal index filter -- toggle to show/hide Splunk internal indexes
Copy and paste the XML contents of dashboard.xml into a new dashboard on your Splunk Cloud instance.
The DDAS single-value panel writes values from the calculator into a lookup (ddaX_retention.csv). Splunk will warn about security risks -- accept the warning.
Just copy and paste the XML contents into a dashboard on your Splunk Cloud Instance
The DDAS (Single Value) panel will complain about security risks. This is due to it writing the values from the calculator into a lookup. Accept this warning.