<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How is Max_size_kb determined in Monitoring Splunk</title>
    <link>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69301#M796</link>
    <description>&lt;P&gt;Yes, it's in the queue settings of $SPLUNK/etc/system/local/server.conf (see &lt;A href="http://docs.splunk.com/Documentation/Splunk/4.3/Admin/Serverconf"&gt;http://docs.splunk.com/Documentation/Splunk/4.3/Admin/Serverconf&lt;/A&gt; for reference).&lt;/P&gt;</description>
    <pubDate>Fri, 10 Feb 2012 16:37:19 GMT</pubDate>
    <dc:creator>ChrisG</dc:creator>
    <dc:date>2012-02-10T16:37:19Z</dc:date>
    <item>
      <title>How is Max_size_kb determined</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69299#M794</link>
      <description>&lt;P&gt;I am looking to troubleshoot performance problems (Indexing latency) on my splunk indexers.   I noticed that there is a lot of blocking, apparently due to the max_size_kb being reached on the indexqueue.  I am not seeing any disk latency, so not sure why this is happening.. &lt;/P&gt;

&lt;P&gt;Anyone know how the max_size_kb is determined, and if it is changeable?&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 11:22:44 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69299#M794</guid>
      <dc:creator>richnavis</dc:creator>
      <dc:date>2020-09-28T11:22:44Z</dc:date>
    </item>
    <item>
      <title>Re: How is Max_size_kb determined</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69300#M795</link>
      <description>&lt;P&gt;This is answered here: &lt;A href="http://splunk-base.splunk.com/answers/38218/universal-forwarder-parsingqueue-kb-size"&gt;http://splunk-base.splunk.com/answers/38218/universal-forwarder-parsingqueue-kb-size&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 10 Feb 2012 13:11:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69300#M795</guid>
      <dc:creator>Linegod</dc:creator>
      <dc:date>2012-02-10T13:11:07Z</dc:date>
    </item>
    <item>
      <title>Re: How is Max_size_kb determined</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69301#M796</link>
      <description>&lt;P&gt;Yes, it's in the queue settings of $SPLUNK/etc/system/local/server.conf (see &lt;A href="http://docs.splunk.com/Documentation/Splunk/4.3/Admin/Serverconf"&gt;http://docs.splunk.com/Documentation/Splunk/4.3/Admin/Serverconf&lt;/A&gt; for reference).&lt;/P&gt;</description>
      <pubDate>Fri, 10 Feb 2012 16:37:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/How-is-Max-size-kb-determined/m-p/69301#M796</guid>
      <dc:creator>ChrisG</dc:creator>
      <dc:date>2012-02-10T16:37:19Z</dc:date>
    </item>
  </channel>
</rss>

