We recently upgraded to a newer version of Splunk App for Windows Infrastructure. It seems to be generating an enormous amount of memory consuming scheduled searches called tSessions_Lookup_Update. Any way to slow this down or remove it entirely? We usually just use the LDAP searches anyway, so I don't know if disabling these would be that detrimental.
