Deployment Architecture

What is the queue "tcpout_peer_nodes" for? I'm seeing it fill up in metrics.log on my universal forwarder

gregbo
Communicator

I'm seeing the queue "tcpout_peer_nodes" almost fill up on my UF:

06-11-2018 10:40:18.384 -0400 INFO  Metrics - group=queue, name=tcpout_peer_nodes, max_size=7340032, current_size=7296696, largest_size=7296696, smallest_size=7296696

Anybody know what it's for or how to change it? Google literally has 0 hits for "tcpout_peer_nodes", same with Splunk Answers.

Tags (1)
0 Karma
1 Solution

gregbo
Communicator

I answered my own question: "peer_nodes" is the name of my output stanza (duh). I changed the size of it under that stanza.

View solution in original post

0 Karma

gregbo
Communicator

I answered my own question: "peer_nodes" is the name of my output stanza (duh). I changed the size of it under that stanza.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...