what is thruput in limits.conf of Universal forwarder? What will it do?

[VijaySrrie]

what is thruput in limits.conf of Universal forwarder? What will it do?

What it its location?

Throughput and thruput (both are same or different)

[gcusello]

Hi @VijaySrrie,

all the limits configurations are in limits.conf that you can find in $SPLUNK_HOME/system/local or default.

If you want to modify limits in a Forwarder, you can put your new configuration in one dedicated Technical Add-On to deploy to the UF or in $SPLUNK_HOME/system/local; I always prefer in a dedicated Technical Add-On.

The parameter to limit the throughput of your UF is "maxKBps".

The default value (as you can read at https://docs.splunk.com/Documentation/Splunk/8.2.3/Admin/Limitsconf) is 256.

Ciao.

Giuseppe