All Apps and Add-ons

How to reduce CPU Usage and find the users/resources causing issues?

SplunkDash
Motivator

Hello,

CPU usage is showing very high more than 92% in monitor console. How do we know which resources causing those issues. If this is due to real time search or executing search queries (or running schedule search/reports), how do we know which users (or searches) are causing that issues. We have a several number of users and remotely using/accessing to SPLUNK SH/Reports and perform search queries and schedule search/reports based on their requirements. Any recommendation will be highly appreciated. Thank you!

 

Labels (4)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console should answer most if not all of your questions.  Go to Resource Usage->CPU Usage:Instance then scroll down to the "Median CPU Usage of Searches" panel.  Split the data by search type or user to see what the heavy hitters are.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console should answer most if not all of your questions.  Go to Resource Usage->CPU Usage:Instance then scroll down to the "Median CPU Usage of Searches" panel.  Split the data by search type or user to see what the heavy hitters are.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...