https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427608#M122426 <P>Search capability, including concurrency has nothing to do with indexed volume. It is mostly constrained by CPU cores on the search head, plus settings, intersecting with actual demand. Read more here:<BR /> <A href="https://www.rfaircloth.com/2017/12/12/tuning-splunk-when-max-concurrent-searches-are-reached/">https://www.rfaircloth.com/2017/12/12/tuning-splunk-when-max-concurrent-searches-are-reached/</A></P> Sat, 27 Apr 2019 01:05:24 GMT woodcock 2019-04-27T01:05:24Z https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427607#M122425 <P>say, I have a splunk cloud,, Splunk as a service running in AWS with a daily index volume of 10 GB data per day. what is the maximum number of concurrent searches allowed? if there is any performance in concurrent searching, how to scale up? </P> Fri, 26 Apr 2019 12:57:51 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427607#M122425 dhivyam 2019-04-26T12:57:51Z https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427608#M122426 <P>Search capability, including concurrency has nothing to do with indexed volume. It is mostly constrained by CPU cores on the search head, plus settings, intersecting with actual demand. Read more here:<BR /> <A href="https://www.rfaircloth.com/2017/12/12/tuning-splunk-when-max-concurrent-searches-are-reached/">https://www.rfaircloth.com/2017/12/12/tuning-splunk-when-max-concurrent-searches-are-reached/</A></P> Sat, 27 Apr 2019 01:05:24 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427608#M122426 woodcock 2019-04-27T01:05:24Z https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427609#M122427 <P>Thanks much for you response. <BR /> I understood from the docs that concurrent searches are related to CPU cores but If it's a Splunk enterprise version we have control over infrastructure. when it's Splunk cloud where do not know about the CPU cores/infra, how many concurrent searches are allowed with better performance?</P> Mon, 29 Apr 2019 11:23:15 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427609#M122427 dhivyam 2019-04-29T11:23:15Z https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427610#M122428 <P>Math is not the right approach here. Instead monitor for logs that clearly indicate either <CODE>queued</CODE> or <CODE>skipped</CODE> searches. If you have these, you have some kind of concurrency problem.</P> Tue, 30 Apr 2019 04:49:08 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-cloud-AWS-COncurrent-searches/m-p/427610#M122428 woodcock 2019-04-30T04:49:08Z