https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346287#M63606 <P>Hi,</P> <P>How to correctly set splunktcpin queue size on indexers?</P> <P>I tried:</P> <P>in server.conf:</P> <PRE><CODE>[queue] maxSize = 2MB </CODE></PRE> <P>in inputs.conf:</P> <PRE><CODE>[splunktcp://9997] queueSize = 4M </CODE></PRE> <P>Restarted indexers, but it doesn't help. I got events like:</P> <PRE><CODE>03-12-2017 11:31:18.692 +0100 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=1352, largest_size=1352, smallest_size=0 </CODE></PRE> Mon, 13 Mar 2017 10:19:58 GMT lukasz92 2017-03-13T10:19:58Z https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346287#M63606 <P>Hi,</P> <P>How to correctly set splunktcpin queue size on indexers?</P> <P>I tried:</P> <P>in server.conf:</P> <PRE><CODE>[queue] maxSize = 2MB </CODE></PRE> <P>in inputs.conf:</P> <PRE><CODE>[splunktcp://9997] queueSize = 4M </CODE></PRE> <P>Restarted indexers, but it doesn't help. I got events like:</P> <PRE><CODE>03-12-2017 11:31:18.692 +0100 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=1352, largest_size=1352, smallest_size=0 </CODE></PRE> Mon, 13 Mar 2017 10:19:58 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346287#M63606 lukasz92 2017-03-13T10:19:58Z https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346288#M63607 <P>rest query:</P> <P>| rest services/data/inputs/tcp/cooked</P> <P>tells me, that the queue size is set to 4M - but why there are new events with max_size_kb=500?</P> Tue, 29 Sep 2020 13:10:31 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346288#M63607 lukasz92 2020-09-29T13:10:31Z https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346289#M63608 <P>I corrected</P> <P>queueSize = 4M</P> <P>to </P> <P>queueSize = 4MB</P> <P>and it works now.</P> Tue, 14 Mar 2017 15:07:56 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-correctly-set-splunktcpin-queue-size-on-indexers/m-p/346289#M63608 lukasz92 2017-03-14T15:07:56Z