Were can I set the read-ahead per this warning in our mongod.log? recommends changing it to 256 or lower.
** WARNING: Readahead for /opt/splunk/var/lib/splunk/kvstore/mongo is set to 4096KB
is this maybe related to an splunk update?
see : https://answers.splunk.com/answers/690118/why-is-the-kv-store-process-failing-after-upgrade.html
unfortunately no. We have not upgraded nor do I have those warning messages.