All Apps and Add-ons

Splunk App for Windows Infrastructure Searches Causing Searches Delayed Error


We recently upgraded to a newer version of Splunk App for Windows Infrastructure.  It seems to be generating an enormous amount of memory consuming scheduled searches called tSessions_Lookup_Update.  Any way to slow this down or remove it entirely?  We usually just use the LDAP searches anyway, so I don't know if disabling these would be that detrimental.

Labels (3)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.