Splunk Indexing and data retention

http://www.learnsplunk.com/splunk-indexer-configuration.html
https://splunk-sizing.appspot.com

Capacity Planning:
http://docs.splunk.com/Documentation/Splunk/4.3.1/Installation/CapacityplanningforalargerSplunkdeployment