https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14664#M1532 <P>Ha! I tried that answer . . . they wanted MORE! </P> Thu, 03 Jun 2010 12:32:44 GMT DrewO 2010-06-03T12:32:44Z https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14662#M1530 <P>How can I tell how many threads have been allocated using the auto tune setting of indexThreads?</P> <P>--snip from indexs.conf.spec --</P> <PRE><CODE>indexThreads = &lt;number or "auto"&gt; * Specifying "auto" or an invalid value will cause Splunk to autotune this param based on your system * The number of threads to use for indexing * The number has to be at least 1 and at most 16 * If specified as &lt; 0 or more than 16, it will be autotuned * This number should not be set higher than the number of processors in the box. * If splunkd is also doing parsing and aggregation, the number should be lower than the total number of processors minus two. * Please only set this value if you are an expert user or are advised by Splunk Support * CARELESSNESS IN SETTING THIS MAY LEAD TO PERMANENT BRAIN DAMAGE OR LOSS OF JOB </CODE></PRE> Wed, 02 Jun 2010 11:30:21 GMT https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14662#M1530 DrewO 2010-06-02T11:30:21Z https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14663#M1531 <P>I guess:</P> <UL> <LI>You can't.</LI> <LI>Why would you need to know?</LI> </UL> <P>Leave it on auto and forget about it.</P> Wed, 02 Jun 2010 20:46:31 GMT https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14663#M1531 gkanapathy 2010-06-02T20:46:31Z https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14664#M1532 <P>Ha! I tried that answer . . . they wanted MORE! </P> Thu, 03 Jun 2010 12:32:44 GMT https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14664#M1532 DrewO 2010-06-03T12:32:44Z https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14665#M1533 <P>I want a pet rhinoceros with laser eye-beams and a razor-sharpened steel horn.</P> Thu, 17 Jun 2010 20:38:01 GMT https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14665#M1533 gkanapathy 2010-06-17T20:38:01Z https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14666#M1534 <P>Splunkd.log will tell you what the auto selected value is: </P> <P>Do a splunk search for "<STRONG>index="_internal" indexThreads param autotuned</STRONG>" </P> <P>you will get back a result that looks like this:</P> <PRE><CODE>splunkd.log.1:07-27-2010 21:51:49.747 INFO IndexProcessor - indexes.conf - indexThreads param autotuned to 2 </CODE></PRE> <P>AS for the laser equipped rhino the best I can do right now is this:</P> <P><IMG src="http://www.orlando-guide.info/forums/Data/djdigitald/20091130154830_sharks_with_laser_beams-w72pgv-d.jpg" alt="laser shark" /></P> Fri, 30 Jul 2010 21:06:27 GMT https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14666#M1534 zscgeek 2010-07-30T21:06:27Z https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14667#M1535 <P>This is my qeuery 4.3.4:</P> <P>index="_internal" source=*splunkd.log indexProcessor AND indexThreads AND param AND autotuned</P> <P>marc</P> Mon, 15 Oct 2012 06:56:41 GMT https://community.splunk.com/t5/Getting-Data-In/indexThreads-is-set-to-auto-how-many-threads-does-that-mean/m-p/14667#M1535 mkelderm 2012-10-15T06:56:41Z