https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605577#M13319 <P>How do you know you have a performance issue?</P> Thu, 14 Jul 2022 12:17:37 GMT ITWhisperer 2022-07-14T12:17:37Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605529#M13317 <P>Lets assume, I have a linux machine and installed universal forwarder in that.</P><P>can i improve the performance by changing some parameters in os kernel ?</P> Thu, 14 Jul 2022 06:10:32 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605529#M13317 super_saiyan 2022-07-14T06:10:32Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605577#M13319 <P>How do you know you have a performance issue?</P> Thu, 14 Jul 2022 12:17:37 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605577#M13319 ITWhisperer 2022-07-14T12:17:37Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605758#M13342 <P>i am not having any performance issue. i am just curious if i can optimize the performance more by doing some changes in setting in os kernal level.</P> Fri, 15 Jul 2022 09:48:07 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605758#M13342 super_saiyan 2022-07-15T09:48:07Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605761#M13345 <P>Let me quote from Donald Knuth's "The Art of Computer Programming":</P><P>"The real problem is that programmers have spent far too much time worrying about efficiency in the wrong places and at the wrong times; premature optimization is the root of all evil (or at least most of it) in programming."</P><P>So even though some kernel tweaking might improve efficiency in some border cases, it's usually not the way to go.</P> Fri, 15 Jul 2022 10:08:23 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-improve-performance/m-p/605761#M13345 PickleRick 2022-07-15T10:08:23Z