topic Re: Many small files - high memory usage Splunk Forwarder in Getting Data In

Many small files - high memory usage Splunk Forwarder- Is there a way to reduce?

nessaner — Thu, 22 Sep 2022 14:58:33 GMT

Is there a way to reduce memory usage for splunk Forwarder? I have two directories with 57k files each (120Mb each) and After restarting service I checked Task manager and memory usage reach 2Gb. I can't reduce the number of files because I've already done that and can't reduce more. I'm sure that the issue is with those directories because after I delete them from inputs.conf memory reach only 100Mb.

Re: Many small files - high memory usage Splunk Forwarder

gcusello — Thu, 22 Sep 2022 06:32:14 GMT

Hi @nessaner,

this is aknown windows problem related to the access to DNS that was solved in a past release.

If it's still present, ask to Splunk Support for the solution.

Ciao.

Giuseppe

Re: Many small files - high memory usage Splunk Forwarder

gcusello — Mon, 26 Sep 2022 06:21:25 GMT

Hi @nessaner,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉