topic AutoLB Volume in Deployment Architecture

AutoLB Volume

asabatini85 — Wed, 11 Apr 2018 07:56:08 GMT

Hi All,

I have 60 indexers and 40 forwarders, I want to set the AutoLB volume, do you know a metric search to calculate a correct value to balance the data load between the indexers?

Re: AutoLB Volume

p_gurav — Wed, 11 Apr 2018 08:23:03 GMT

You can use autoLBVolume parameter in outputs.conf. Refer below document for more details:

https://docs.splunk.com/Documentation/Splunk/7.0.3/Admin/Outputsconf

Re: AutoLB Volume

asabatini85 — Wed, 11 Apr 2018 13:07:26 GMT

Yes, I know the autoLBVolume parameter, I want to know if exist a metric search to calculate how much volume my architecture hold.

Re: AutoLB Volume

p_gurav — Wed, 11 Apr 2018 13:16:20 GMT

Try using below search:

index="_internal" source="*metrics.log" group="per_host_thruput" | chart sum(kb) by series | sort - sum(kb)

If you want license usage:

 index=_internal source="*license_usage.log" type=usage type=Usage idx=* pool="Your Pool Name" earliest=-30d@d latest=@d
 | eval GB = b
 | timechart limit=50 partial=false span=1d sum(eval(GB/1024/1024/1024)) by idx