topic Limiting RAM CPU and Disk utilization on Universal Forwarder in Getting Data In

Limiting RAM CPU and Disk utilization on Universal Forwarder

aruncp333 — Wed, 26 Feb 2020 20:05:38 GMT

Hello Splunkers,

I want to know if we can limit the RAM, CPU and Disk utilization of a server where I have installed the Universal Forwarder.
Currently, based on my research I understand that the Bandwidth limit can be controlled using limits.conf.

Background: As I am installing the UF on my production server (*nix, Windows) I wouldn't want to choke the resource utilization on the server cuz of UF on it instead, I would like to limit the RAM and CPU utilization to 2-5% and Disk to 10-15%.

Thanks in advance.

Re: Limiting RAM CPU and Disk utilization on Universal Forwarder

masonmorales — Thu, 27 Feb 2020 01:14:10 GMT

This is not something natively supported on the UF. You could look at OS-specific tools for controlling process resource utilization [of the UF/splunkd], but realize that it could have a negative impact on UF performance.

Re: Limiting RAM CPU and Disk utilization on Universal Forwarder

pruthvikrishnap — Thu, 27 Feb 2020 01:22:49 GMT

There is one way to limit disk and ram utilization, you can do this by using Cgroup. below is a doc which speaks about it.
https://askubuntu.com/questions/836469/install-cgconfig-in-ubuntu-16-04