All Apps and Add-ons

How to reduce CPU Usage and find the users/resources causing issues?

SplunkDash
Motivator

Hello,

CPU usage is showing very high more than 92% in monitor console. How do we know which resources causing those issues. If this is due to real time search or executing search queries (or running schedule search/reports), how do we know which users (or searches) are causing that issues. We have a several number of users and remotely using/accessing to SPLUNK SH/Reports and perform search queries and schedule search/reports based on their requirements. Any recommendation will be highly appreciated. Thank you!

 

Labels (3)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console should answer most if not all of your questions.  Go to Resource Usage->CPU Usage:Instance then scroll down to the "Median CPU Usage of Searches" panel.  Split the data by search type or user to see what the heavy hitters are.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console should answer most if not all of your questions.  Go to Resource Usage->CPU Usage:Instance then scroll down to the "Median CPU Usage of Searches" panel.  Split the data by search type or user to see what the heavy hitters are.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...