<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Indexing Slow in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385195#M69213</link>
    <description>&lt;P&gt;And what kind of storage do these windows servers use?&lt;/P&gt;

&lt;P&gt;PS: any particular reason you're running indexers on windows? I believe in general Linux is preferred, also for performance reasons?&lt;/P&gt;</description>
    <pubDate>Thu, 15 Nov 2018 11:24:16 GMT</pubDate>
    <dc:creator>FrankVl</dc:creator>
    <dc:date>2018-11-15T11:24:16Z</dc:date>
    <item>
      <title>Indexing Slow</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385193#M69211</link>
      <description>&lt;P&gt;Hi Team,&lt;/P&gt;

&lt;P&gt;My indexing queue is reaching 90-98% also we have checked the cpu utilization in every indexers ( 30 to 40%) cpu.&lt;BR /&gt;
Sometimes the data flow is faster and suddenly it becoming slow only from 3 application servers rest of all the servers data flowing faster.&lt;/P&gt;

&lt;P&gt;We have not mentioned any configurations in server.conf for indexing queue&lt;/P&gt;

&lt;P&gt;environment - "windows servers"  3 indexers (clustering), 1 master.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
shaik&lt;/P&gt;</description>
      <pubDate>Wed, 14 Nov 2018 18:03:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385193#M69211</guid>
      <dc:creator>shaikhussain2</dc:creator>
      <dc:date>2018-11-14T18:03:21Z</dc:date>
    </item>
    <item>
      <title>Re: Indexing Slow</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385194#M69212</link>
      <description>&lt;P&gt;Hi there,&lt;BR /&gt;
What's the daily data volume on your platform ? and do you have data ack enabled for forwarders ?&lt;/P&gt;</description>
      <pubDate>Wed, 14 Nov 2018 18:48:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385194#M69212</guid>
      <dc:creator>DavidHourani</dc:creator>
      <dc:date>2018-11-14T18:48:54Z</dc:date>
    </item>
    <item>
      <title>Re: Indexing Slow</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385195#M69213</link>
      <description>&lt;P&gt;And what kind of storage do these windows servers use?&lt;/P&gt;

&lt;P&gt;PS: any particular reason you're running indexers on windows? I believe in general Linux is preferred, also for performance reasons?&lt;/P&gt;</description>
      <pubDate>Thu, 15 Nov 2018 11:24:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Indexing-Slow/m-p/385195#M69213</guid>
      <dc:creator>FrankVl</dc:creator>
      <dc:date>2018-11-15T11:24:16Z</dc:date>
    </item>
  </channel>
</rss>

