<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to speed the files input process in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/how-to-speed-the-files-input-process/m-p/72442#M14772</link>
    <description>&lt;P&gt;Not really, splunk indexers already go full speed by default. &lt;/P&gt;

&lt;P&gt;Check your indexing queues queues with the sos app to find any bottleneck.&lt;BR /&gt;
One remark about universal and lighweight forwarders : they have a limit of 256 kbps for the network speed. You can remove this limit.&lt;/P&gt;</description>
    <pubDate>Mon, 24 Dec 2012 16:42:50 GMT</pubDate>
    <dc:creator>yannK</dc:creator>
    <dc:date>2012-12-24T16:42:50Z</dc:date>
    <item>
      <title>how to speed the files input process</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/how-to-speed-the-files-input-process/m-p/72441#M14771</link>
      <description>&lt;P&gt;If I have a directory containing many files to be added for file monitoring inputs, Splunk reads the files one by one. It'll take a long time if the files have a big size.  Is there any way Splunk can read multiple files simultaneously to improve the inputs speed(not with multiple forwarders, just for one Splunk instance or one Forwarder instance )? Thanks!&lt;/P&gt;</description>
      <pubDate>Mon, 24 Dec 2012 08:07:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/how-to-speed-the-files-input-process/m-p/72441#M14771</guid>
      <dc:creator>cyue_splunk</dc:creator>
      <dc:date>2012-12-24T08:07:22Z</dc:date>
    </item>
    <item>
      <title>Re: how to speed the files input process</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/how-to-speed-the-files-input-process/m-p/72442#M14772</link>
      <description>&lt;P&gt;Not really, splunk indexers already go full speed by default. &lt;/P&gt;

&lt;P&gt;Check your indexing queues queues with the sos app to find any bottleneck.&lt;BR /&gt;
One remark about universal and lighweight forwarders : they have a limit of 256 kbps for the network speed. You can remove this limit.&lt;/P&gt;</description>
      <pubDate>Mon, 24 Dec 2012 16:42:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/how-to-speed-the-files-input-process/m-p/72442#M14772</guid>
      <dc:creator>yannK</dc:creator>
      <dc:date>2012-12-24T16:42:50Z</dc:date>
    </item>
  </channel>
</rss>

