https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Load-Balancer-Forwarder-Performance-Problem/m-p/105207#M7505 <P>Hey Splunkers,</P> <P>Anyone who knows about setting up splunk forwarder as a load balancer to aggregate lower forwarder?</P> <P>We have an issue where we are aggregating all lower forwarder traffic to a forwarder set-up as a load balanced forwarder. In this scenario, we have bottle neck at the aggregated forwarder where data is being queued not processing lower forwarder traffice fast enough. How can we set-up that aggregating LB forwarder to process at it's max to process all traffic as fast as possible.</P> <P>Is there limits on max amount of traffic a forwarder can process as LB forwarder? we have looked at the limits.conf for thruput option which set to "0" to minimize any limits.</P> <P>Thanks in advance~!</P> Sun, 22 Jul 2012 00:21:12 GMT clyde772 2012-07-22T00:21:12Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Load-Balancer-Forwarder-Performance-Problem/m-p/105207#M7505 <P>Hey Splunkers,</P> <P>Anyone who knows about setting up splunk forwarder as a load balancer to aggregate lower forwarder?</P> <P>We have an issue where we are aggregating all lower forwarder traffic to a forwarder set-up as a load balanced forwarder. In this scenario, we have bottle neck at the aggregated forwarder where data is being queued not processing lower forwarder traffice fast enough. How can we set-up that aggregating LB forwarder to process at it's max to process all traffic as fast as possible.</P> <P>Is there limits on max amount of traffic a forwarder can process as LB forwarder? we have looked at the limits.conf for thruput option which set to "0" to minimize any limits.</P> <P>Thanks in advance~!</P> Sun, 22 Jul 2012 00:21:12 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Load-Balancer-Forwarder-Performance-Problem/m-p/105207#M7505 clyde772 2012-07-22T00:21:12Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Load-Balancer-Forwarder-Performance-Problem/m-p/105208#M7506 <P>have you looked into the <CODE>maxQueueSize</CODE> attribute in <CODE>outputs.conf</CODE> or <CODE>[queue] maxSize</CODE> in <CODE>server.conf</CODE> ?</P> Mon, 23 Jul 2012 19:21:57 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Load-Balancer-Forwarder-Performance-Problem/m-p/105208#M7506 MarioM 2012-07-23T19:21:57Z