From 0656fb427a95697c372cd7fc2279439409392a64 Mon Sep 17 00:00:00 2001
From: mkarlstrand-splunk
 <49571555+mkarlstrand-splunk@users.noreply.github.com>
Date: Sat, 31 Aug 2019 08:37:27 -0700
Subject: [PATCH] Update gettingstarted.md (#73)

Adding base system spec
---
 docs/gettingstarted.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/gettingstarted.md b/docs/gettingstarted.md
index 8abfe3b..a3c3c4f 100644
--- a/docs/gettingstarted.md
+++ b/docs/gettingstarted.md
@@ -1,7 +1,7 @@
 
 # Pre-req
 
-* Linux host with Docker 19.x or newer with Docker Swarm enabled
+* Linux host with 4-6 cores & 2-4 GB memory (Docker container should be allocated 2 cores 2 GB of memory) and Docker 19.x or newer with Docker Swarm enabled
     * [Getting Started](https://docs.docker.com/get-started/)
 * A Splunk index for metrics typically "em_metrics"
 * One or more Splunk indexes for events collected by SC4S
@@ -95,4 +95,4 @@ services:
       - SYSLOG_PRESUME_FILTER=f_juniper_netscreen
     volumes:
     - ./sc4s-juniper/splunk_index.csv:/opt/syslog-ng/etc/context-local/splunk_index.csv
-```
\ No newline at end of file
+```