https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482386#M1719 <P>I'm trying to set something like this in an app.<BR /> "[search]<BR /> enable_memory_tracker = true<BR /> search_process_memory_usage_threshold = 1000"</P> <P>in system/local I already have limits.conf set to:<BR /> "[search]<BR /> enable_memory_tracker = true<BR /> search_process_memory_usage_threshold = 100"</P> <P>These values are for testing purposes. But when i try to search something from within the app itself, the memory limit still remains 100mb.</P> Wed, 30 Sep 2020 05:08:00 GMT mahjp 2020-09-30T05:08:00Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482382#M1715 <P>Hi everyone, this is my first time here.</P> <P>I'm currently trying to set a limit that queries can use in my environment and i've successfully set a global config in limits.conf. But how can I make an exception to this config? Say I want to allow a single app to use more memory because it really needs it.<BR />Where should I put this exception? Inside a limits.conf in app/default?</P> <P>Couldn't find anything related to that on the doc for limits.conf</P> <P>Many thanks in advance.</P> Sun, 07 Jun 2020 02:34:38 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482382#M1715 mahjp 2020-06-07T02:34:38Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482383#M1716 <P>Splunk's Workload Management feature may be able to help. It uses Linux cgroups to control how much resources searches can use. <BR /> See <A href="https://docs.splunk.com/Documentation/Splunk/8.0.3/Workloads/Aboutworkloadmanagement">https://docs.splunk.com/Documentation/Splunk/8.0.3/Workloads/Aboutworkloadmanagement</A> for more information.</P> Thu, 23 Apr 2020 14:25:26 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482383#M1716 richgalloway 2020-04-23T14:25:26Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482384#M1717 <P>Great, thanks. I'll check it out.<BR /> But just to be sure, the limits.conf will not work if placed under app/default in my search heads?</P> Thu, 23 Apr 2020 17:25:02 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482384#M1717 mahjp 2020-04-23T17:25:02Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482385#M1718 <P>limits.conf can be set in any app that is not disabled. Which setting are you changing?</P> Thu, 23 Apr 2020 19:44:44 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482385#M1718 richgalloway 2020-04-23T19:44:44Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482386#M1719 <P>I'm trying to set something like this in an app.<BR /> "[search]<BR /> enable_memory_tracker = true<BR /> search_process_memory_usage_threshold = 1000"</P> <P>in system/local I already have limits.conf set to:<BR /> "[search]<BR /> enable_memory_tracker = true<BR /> search_process_memory_usage_threshold = 100"</P> <P>These values are for testing purposes. But when i try to search something from within the app itself, the memory limit still remains 100mb.</P> Wed, 30 Sep 2020 05:08:00 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482386#M1719 mahjp 2020-09-30T05:08:00Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482387#M1720 <P>etc/system/local has highest priority for .conf files so it will override any setting in an app.<BR /> The memory tracker settings are global - not per-app. For granular control of resources use the Workload Management feature.</P> Fri, 24 Apr 2020 13:42:40 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-set-query-memory-usage-for-specific-app/m-p/482387#M1720 richgalloway 2020-04-24T13:42:40Z