<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk Indexers Physicial memory usage high in Monitoring Splunk</title>
    <link>https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexers-Physicial-memory-usage-high/m-p/486724#M4035</link>
    <description>&lt;P&gt;Hi , I am currently experiencing high memory usage on my indexers when i saw the memory usage , i saw a high amount of memory caches below,&lt;BR /&gt;
             total       used       free     shared    buffers     cached&lt;BR /&gt;
Mem:        516761     477169      39592          0       1158     457892&lt;BR /&gt;
-/+ buffers/cache:      18117     498644&lt;BR /&gt;
Swap:        51199        551      50648&lt;/P&gt;

&lt;P&gt;How safe is it to clear buffers and cache ? If i clear caches is it will create any issue like deleting data make indexers down ?&lt;BR /&gt;
I am thinking to clear it using these commands :&lt;BR /&gt;
sync; echo 1 &amp;gt; /proc/sys/vm/drop_caches.&lt;BR /&gt;
sync; echo 3 &amp;gt; /proc/sys/vm/drop_caches &lt;/P&gt;</description>
    <pubDate>Wed, 30 Sep 2020 02:16:39 GMT</pubDate>
    <dc:creator>ram254481493</dc:creator>
    <dc:date>2020-09-30T02:16:39Z</dc:date>
    <item>
      <title>Splunk Indexers Physicial memory usage high</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexers-Physicial-memory-usage-high/m-p/486724#M4035</link>
      <description>&lt;P&gt;Hi , I am currently experiencing high memory usage on my indexers when i saw the memory usage , i saw a high amount of memory caches below,&lt;BR /&gt;
             total       used       free     shared    buffers     cached&lt;BR /&gt;
Mem:        516761     477169      39592          0       1158     457892&lt;BR /&gt;
-/+ buffers/cache:      18117     498644&lt;BR /&gt;
Swap:        51199        551      50648&lt;/P&gt;

&lt;P&gt;How safe is it to clear buffers and cache ? If i clear caches is it will create any issue like deleting data make indexers down ?&lt;BR /&gt;
I am thinking to clear it using these commands :&lt;BR /&gt;
sync; echo 1 &amp;gt; /proc/sys/vm/drop_caches.&lt;BR /&gt;
sync; echo 3 &amp;gt; /proc/sys/vm/drop_caches &lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 02:16:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexers-Physicial-memory-usage-high/m-p/486724#M4035</guid>
      <dc:creator>ram254481493</dc:creator>
      <dc:date>2020-09-30T02:16:39Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk Indexers Physicial memory usage high</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexers-Physicial-memory-usage-high/m-p/486725#M4036</link>
      <description>&lt;P&gt;Your memory usage looks normal for an indexer. You can clear the cache but it's going to quickly fill up again which is a good thing since it helps you avoid unnecessary disk I/O. Splunk will still be able to use the memory when needed. What kind of application problem are you experiencing?&lt;/P&gt;</description>
      <pubDate>Fri, 27 Sep 2019 17:28:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Indexers-Physicial-memory-usage-high/m-p/486725#M4036</guid>
      <dc:creator>jtacy</dc:creator>
      <dc:date>2019-09-27T17:28:13Z</dc:date>
    </item>
  </channel>
</rss>

