https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77769#M15926 <P>The author of the answer works for Splunk (head of engineering from memory) and knows the product inside out, back-to-front, and side-to-side... so his answer is about as definitive as it gets I'm afraid.</P> Tue, 20 Aug 2013 09:05:42 GMT rturk 2013-08-20T09:05:42Z https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77767#M15924 <P>We are using a splunk universal forwarder on our virtual server systems and noticed that every instance uses about 70-80MB of RAM. This is more than 1800 MB of RAM on our 25 virtual systems. <BR /> <BR />Is there a way to reduce the memory usage of the Universal Forwarder by limiting a cache queue size or something? </P> Thu, 27 Jun 2013 12:56:14 GMT https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77767#M15924 FRoth 2013-06-27T12:56:14Z https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77768#M15925 <P>I found this disappointing answer to my question. <A href="http://answers.splunk.com/answers/47003/limit-the-memory-used-by-universal-forwarder">http://answers.splunk.com/answers/47003/limit-the-memory-used-by-universal-forwarder</A></P> Tue, 20 Aug 2013 08:44:07 GMT https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77768#M15925 FRoth 2013-08-20T08:44:07Z https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77769#M15926 <P>The author of the answer works for Splunk (head of engineering from memory) and knows the product inside out, back-to-front, and side-to-side... so his answer is about as definitive as it gets I'm afraid.</P> Tue, 20 Aug 2013 09:05:42 GMT https://community.splunk.com/t5/Getting-Data-In/Reduce-Splunk-Forwarder-RAM-usage/m-p/77769#M15926 rturk 2013-08-20T09:05:42Z