Configure persistent storage for the Splunk Operator

Configure persistent storage for Splunk Enterprise pods on Kubernetes.

The Splunk Operator for Kubernetes uses Storage Classes to create and manage Persistent Volumes for all Splunk Enterprise pods. The Splunk Operator mounts two volumes for each pod:

Path Purpose Default size
/opt/splunk/etc Apps, user objects, and custom configurations 10 GiB
/opt/splunk/var All indexed events, logs, and other data 100 GiB

You can customize the storage capacity and Storage Class name for the /opt/splunk/etc and /opt/splunk/var volumes by modifying the storageCapacity and storageClassName fields under the etcVolumeStorageConfig and varVolumeStorageConfig spec. If you do not provide a storageClassName, the Splunk Operator uses the default Storage Class for your Kubernetes cluster.