https://community.splunk.com/t5/Monitoring-Splunk/How-can-I-modify-Splunk-cluster-configurations-to-use-CPU/m-p/499196#M4137 <P>Here are the changes that can be made to increase the concurrency and searches for the 'admin' user:</P> <OL> <LI>For user level concurrency, on all Splunk search head nodes add: /opt/splunk/etc/system/local/authorize.conf [role_admin] srchJobsQuota=5000 cumulativeSrchJobsQuota=5000</LI> <LI>For Splunk search level concurrency, add the following section to /opt/splunk/etc/system/local/limits.conf on all search head nodes: [search] base_max_searches=192 ttl=60</LI> </OL> Wed, 30 Sep 2020 04:41:28 GMT awilcox_splunk 2020-09-30T04:41:28Z https://community.splunk.com/t5/Monitoring-Splunk/How-can-I-modify-Splunk-cluster-configurations-to-use-CPU/m-p/499195#M4136 <P>Can certain Splunk configurations be modified to increase concurrency? Can searches be modified to better use CPU?</P> Fri, 05 Jun 2020 23:29:05 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-can-I-modify-Splunk-cluster-configurations-to-use-CPU/m-p/499195#M4136 awilcox_splunk 2020-06-05T23:29:05Z https://community.splunk.com/t5/Monitoring-Splunk/How-can-I-modify-Splunk-cluster-configurations-to-use-CPU/m-p/499196#M4137 <P>Here are the changes that can be made to increase the concurrency and searches for the 'admin' user:</P> <OL> <LI>For user level concurrency, on all Splunk search head nodes add: /opt/splunk/etc/system/local/authorize.conf [role_admin] srchJobsQuota=5000 cumulativeSrchJobsQuota=5000</LI> <LI>For Splunk search level concurrency, add the following section to /opt/splunk/etc/system/local/limits.conf on all search head nodes: [search] base_max_searches=192 ttl=60</LI> </OL> Wed, 30 Sep 2020 04:41:28 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-can-I-modify-Splunk-cluster-configurations-to-use-CPU/m-p/499196#M4137 awilcox_splunk 2020-09-30T04:41:28Z