topic Re: How do we identify which splunk search is consuming more memory on the splunk indexers ? in Monitoring Splunk https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380586#M5703 <P>Hi splunker969,</P> <P>read the docs about the management console <A href="http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview">http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview</A> and most specific about the search usage statistics dashboard <A href="http://docs.splunk.com/Documentation/Splunk/latest/DMC/Searchusagestatistics">http://docs.splunk.com/Documentation/Splunk/latest/DMC/Searchusagestatistics</A></P> <P>Hope that helps ...</P> <P>cheers, MuS</P> Thu, 20 Sep 2018 20:54:17 GMT MuS 2018-09-20T20:54:17Z How do we identify which splunk search is consuming more memory on the splunk indexers ? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380585#M5702 <P>How do we identify which splunk search is consuming more memory on the splunk indexers ?</P> Thu, 20 Sep 2018 20:22:18 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380585#M5702 splunker969 2018-09-20T20:22:18Z Re: How do we identify which splunk search is consuming more memory on the splunk indexers ? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380586#M5703 <P>Hi splunker969,</P> <P>read the docs about the management console <A href="http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview">http://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview</A> and most specific about the search usage statistics dashboard <A href="http://docs.splunk.com/Documentation/Splunk/latest/DMC/Searchusagestatistics">http://docs.splunk.com/Documentation/Splunk/latest/DMC/Searchusagestatistics</A></P> <P>Hope that helps ...</P> <P>cheers, MuS</P> Thu, 20 Sep 2018 20:54:17 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380586#M5703 MuS 2018-09-20T20:54:17Z Re: How do we identify which splunk search is consuming more memory on the splunk indexers ? https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380587#M5704 <P>The monitoring console will work for this case as per MuS's link, <A href="https://splunkbase.splunk.com/app/3796/">Alerts For Splunk Admins</A> has a dashboard called Troubleshooting indexer CPU, it can also be used to look at searches by memory through the introspection index.</P> <P>Or you can just re-use the queries from the <A href="https://github.com/gjanders/SplunkAdmins/blob/master/default/data/ui/views/troubleshooting_indexer_cpu.xml">dashboard</A> to view the data you want from the introspection index.</P> Thu, 20 Sep 2018 22:50:56 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-do-we-identify-which-splunk-search-is-consuming-more-memory/m-p/380587#M5704 gjanders 2018-09-20T22:50:56Z