topic max throughputs of forwarders in Getting Data In https://community.splunk.com/t5/Getting-Data-In/max-throughputs-of-forwarders/m-p/71767#M14645 <P>dear sirs,</P> <P>I'm aware about default limitations in a lightweight forwarder (256KB), which can be increased. it’s also clear to me that this depends on a lot of points, like sources (local disk, lan mount, lan interface speed, system performance etc.) and functionality (raw, lightweight and full forwarder).</P> <P>what would be the critical throughput limit, that a forwarder could handle per second/minute/hour/day (practical experience) depending on functionality?</P> <P>the question is related to forwarders which could send a huge amount of data within a short time range.</P> <P>regards, michael</P> Thu, 31 Mar 2011 14:38:44 GMT MuS 2011-03-31T14:38:44Z max throughputs of forwarders https://community.splunk.com/t5/Getting-Data-In/max-throughputs-of-forwarders/m-p/71767#M14645 <P>dear sirs,</P> <P>I'm aware about default limitations in a lightweight forwarder (256KB), which can be increased. it’s also clear to me that this depends on a lot of points, like sources (local disk, lan mount, lan interface speed, system performance etc.) and functionality (raw, lightweight and full forwarder).</P> <P>what would be the critical throughput limit, that a forwarder could handle per second/minute/hour/day (practical experience) depending on functionality?</P> <P>the question is related to forwarders which could send a huge amount of data within a short time range.</P> <P>regards, michael</P> Thu, 31 Mar 2011 14:38:44 GMT https://community.splunk.com/t5/Getting-Data-In/max-throughputs-of-forwarders/m-p/71767#M14645 MuS 2011-03-31T14:38:44Z Re: max throughputs of forwarders https://community.splunk.com/t5/Getting-Data-In/max-throughputs-of-forwarders/m-p/71768#M14646 <P>had a little chat with <EM>mzorzi</EM> and we came up with the conclusion, that the throughput limit for a forwarder would be the network interface. </P> <P>nevertheless, the indexer would be the bottleneck here, not the forwarder.</P> <P>regards</P> Tue, 05 Apr 2011 18:55:42 GMT https://community.splunk.com/t5/Getting-Data-In/max-throughputs-of-forwarders/m-p/71768#M14646 MuS 2011-04-05T18:55:42Z