topic Where can I adjust the settings for universal forwarder data input speed? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595667#M104041 <P>Get data from Universal Forwarder, but 100MB data takes an hour Do you have any settings to speed up?</P> Thu, 28 Apr 2022 17:00:07 GMT noott211 2022-04-28T17:00:07Z Where can I adjust the settings for universal forwarder data input speed? https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595667#M104041 <P>Get data from Universal Forwarder, but 100MB data takes an hour Do you have any settings to speed up?</P> Thu, 28 Apr 2022 17:00:07 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595667#M104041 noott211 2022-04-28T17:00:07Z Re: universal forwarder data input speed https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595674#M104043 <P>You may get faster transfer by setting <FONT face="courier new,courier">maxKBps=0</FONT> in limits.conf.</P> Thu, 28 Apr 2022 00:30:17 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595674#M104043 richgalloway 2022-04-28T00:30:17Z Re: universal forwarder data input speed https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595686#M104045 <P>That's basically how it's set up..</P> Thu, 28 Apr 2022 01:40:28 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595686#M104045 noott211 2022-04-28T01:40:28Z Re: universal forwarder data input speed https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595698#M104046 <P>Firstly - check your config with btool and see if the limit isn't being overwritten somewhere.</P><P>Secondly - is it a monitor input, scripted input, eventlog input?</P><P>Thirdly - maybe you're just limited by bandwidth of your connection?</P> Thu, 28 Apr 2022 04:13:09 GMT https://community.splunk.com/t5/Getting-Data-In/Where-can-I-adjust-the-settings-for-universal-forwarder-data/m-p/595698#M104046 PickleRick 2022-04-28T04:13:09Z