topic Re: Slow HEC server ingestion thruput in Deployment Architecture

Slow HEC server ingestion thruput

hrawat — Wed, 11 Aug 2021 06:39:59 GMT

Also <protocol>://<host>:8088/services/collector/health timing out.

hrawat — Wed, 10 Nov 2021 06:39:43 GMT

Version 8.1.x and 8.2.x so far has single threaded HEC receiver. The reason for that is dedicatedIoThreads config in inputs.conf is ignored.

dedicatedIoThreads = <integer>

Until it get's restored in 8.2.4, you may want to stay on latest 7.3.x/8.0.x version for HEC receiver.

hrawat — Wed, 10 Nov 2021 01:43:41 GMT

Correction: Only 8.1.x and 8.2.x so far has single threaded HEC receiver. 8.0.x is not impacted by dedicatedIoThreads regression.

hrawat — Fri, 01 Jul 2022 21:26:03 GMT

This issue single threaded HEC server( not honoring dedicatedIoThreads) is resolved by 8.1.7 and above, 8.2.4 and above, 9.0.x