topic Re: Average load of universal forwarder and heavy forwarder in Splunk Search

Average load of universal forwarder and heavy forwarder

DavidHourani — Thu, 28 Jul 2016 15:04:43 GMT

Hello Splunkers,

What is the average CPU/memory usage of a universal forwarder and heavy forwarder ? ( The average for a forwarder collecting *Nix perf for example)

Regards,
David

Re: Average load of universal forwarder and heavy forwarder

Jeremiah — Thu, 28 Jul 2016 15:28:41 GMT

The answers varies depending upon your configuration, but for a universal forwarder running the *nix app, you are probably looking at <1% CPU and 40 MB of RAM. A heavy forwarder will be slightly higher. Running your own benchmarks in your environment is the best way to measure the forwarder's impact.

There have also been several discussions about this in the past:

https://answers.splunk.com/answers/645/what-is-splunks-footprint.html

Re: Average load of universal forwarder and heavy forwarder

DavidHourani — Thu, 28 Jul 2016 20:36:22 GMT

thank you i couldn't find the other answers cause it's kind of hard to google the right words hehe..