In Veeam One Reporter, how do I determine if I have enough hardware resources in my vSphere cluster to add additional CPU to a specific VM?

We are using Veeam Backup and Replication 8.0, which also includes Veeam One Reporter, Monitor and Backup Enterprise Manager.  A request was put in to have additional CPU cores added to a server. How do i determine if I have enough hardware resources in my vSphere (VM cluster) environment to add additional CPU to a specific VM? Which component of Veeam would I use? Reporter, Monitor, or Enterprise Manager?
joukiejoukAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
You would use Veeam One Reporter, to take the Guesswork out of Resource Optimization and Planning.
joukiejoukAuthor Commented:
Can you detail the steps I need to take in Veeam ONE?
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
see here

http://helpcenter.veeam.com/one/70/vsphere/generating_reports.html

You need to run a Optimization and capacity planning reports.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
joukiejoukAuthor Commented:
I have a few questions.

Would I start off here?
2015-12-19_16-26-50.png
If so, for this particular ESX host that the VM reside on, it shows the following for Capacity planning:
2015-12-19_16-23-37.png2015-12-19_15-13-40.png2015-12-19_15-17-54.png
The VM that I need to provision currently has 8 CPUs. I need to configure it to have a total of 12 CPUs (Total number of cores). With the report provided, does it look like I have enough capacity to add additional CPUs?

Also, To provision a total of 12 CPUs for this VM, would I add on to "Number of virtual sockets" or "Number of cores per socket"?
2015-12-19_16-29-16.png
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
I would always recommend you use sockets, rather than cores, only use cores if you have a specific licensing restriction based on cores.

So I would change the exiting setup to 8 vCPUs (sockets) x 1 Core.

Yes, I think you have capacity.

12 vCPU that is a lot of processing, very few VMs need more than 4 vCPU!

What is the function of this server, and remember, adding many vCPU can cause te performance to get worse!
joukiejoukAuthor Commented:
This is a Splunk Indexer server, which will require more resources to accommodate all the manual and background queries that are constantly occurring.
jmcgOwnerCommented:
It looks like, from the reports that you posted, that you likely have headroom on both memory and vCPU that you may be able to use increase the Splunk Indexer server's capacity. But first check into the guest's individual resource usage statistics to get an idea what it is currently limited by. If it's memory limited, you may not gain anything by upping the number of vCPUs.
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
Check performance of the virtual machine, CPU, Memory and Disk!
joukiejoukAuthor Commented:
This Splunk VM is an Indexer. Here is the guest's individual resource usage statistics
2015-12-22_8-22-39.png
Here is a one week performance stat of CPU and memory.
2015-12-22_8-24-50.png
In checking Resource Monitor, I am seeing a bunch of "splunkd.exe" process running at once, thus spiking up the CPU to 99% - 100%. Should there be more than one "splunkd.exe" running at once? Would restarting the service resolve this problem?
2015-12-22_8-31-19.png
Also, would be helpful if someone can forward me a data sheet that detail the minimum hardware requirement for a Splunk Indexer VM.
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
datastore ?

How many messages are hitting the server ?

Very quickly, you do not have enough ram, minimum should be 12GB, and nearer 16GB.

see here

http://docs.splunk.com/Documentation/Splunk/6.1/Installation/Systemrequirements
jmcgOwnerCommented:
The Splunk documentation makes many recommendations, but they are generic. It's likely that it will use as much RAM as you are willing to give it, but you would have to do experiments to determine if the extra RAM actually helps. Is your environment willing to accommodate some A/B testing where you may see whether increasing RAM or increasing the number of vCPUs makes a difference for the users' perceived performance? Those investigations can be done relatively easily and don't necessarily require that you know a lot about the application's behavior. Remember that adding vCPUs makes the VM harder to schedule, so - depending on what else is going on on the host - may not help performance.

For testing, you can afford to be somewhat bold: increase RAM allocation by 50-100%. Increase the number of vCPU to 50% of what the host has available. If you can see a difference with large changes, you can do more changes to see if you can find the optimal level. If you can't see a difference with such large changes,  you'll need to look elsewhere for performance bottlenecks.

If these experiments don't help, you'll need to do more detailed performance analysis. Splunk is going to also depend on network performance and storage access. It would prefer to have dedicated devices for some of its storage and in some cases using SSD in the right place will make a big difference.
joukiejoukAuthor Commented:
Andrew,

Thanks for the link. I think I can forward this to upper management to justify why we would need to bump up the CPU and RAM. I have a couple of questions based on the below screenshot.

1. Does "2x six-core" mean 12 CPU?
2015-12-28_10-35-57.png
2. If so, based on Splunk Indexer Server VM Properties, how would i configure what I currently have for CPUs to meet the requirement of 12 CPU?
2015-12-19_16-29-16.png
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
1. The splunk requirement is based on a physical server specification.

2. if you want to set the server to 12 vCPU, you must stop the server, and change 2 to 12, and 4 to 1.

I would change as a test from 2 to 8, and 4 to 1.

e.g. 8 vCPU, if 8 CPUs are really required in the VM.
joukiejoukAuthor Commented:
Only got a slight improvement after upgrading the RAM to 12 GB and CPU to 12 CPU on the VM. Should I be looking into I/O next? Here are a couple of screenshot concerning disk below. Can anyone tell me if disk utilization appears abnormal? If so, what action(s) should I take next to increase the performace?

2016-01-04_15-10-30.png
2016-01-04_15-12-36.png
Andrew Hancock (VMware vExpert / EE Fellow)VMware and Virtualization ConsultantCommented:
you need to look at read and write latencies.

see my EE Article here, look at disk i/o bottlenecks

HOW TO:  Performance Monitor vSphere 4.x or 5.0

and you may find that this VM, is not suitable as a virtual machine!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VMware

From novice to tech pro — start learning today.