All Apps and Add-ons

S.o.S Splunk on Splunk: Is there a description of the CPU and Memory usage charts?

Engager

I haven’t been able to find a description of what exactly the Splunkd server and Searches are describing on the CPU/Memory usage charts. I was assuming that Searches are part of Splunkd server?

We are using Splunk on Splunk version 3.2.1 - build 247062

Could you provide a description of each?

Thanks

0 Karma
1 Solution

Splunk Employee
Splunk Employee

These are process types.

  • "splunkd server" is associated with the main splunkd process and its helper / process-runner.
  • "searches" is associated with search processes. While these are also named "splunkd" they are very different invocations of that binary than the main splunkd service, which is a long-running process. Search processes only run until the search is finished, after which they are terminated.

View solution in original post

Splunk Employee
Splunk Employee

These are process types.

  • "splunkd server" is associated with the main splunkd process and its helper / process-runner.
  • "searches" is associated with search processes. While these are also named "splunkd" they are very different invocations of that binary than the main splunkd service, which is a long-running process. Search processes only run until the search is finished, after which they are terminated.

View solution in original post