CPU limit for search head

[gfriedmann]

I am running into the "approaching max search limit per cpu" warning message on my search head.

I have 1 search head and 2 indexers. The indexers are much more powerful. The search head is 4 CPU, and the indexers are 24 CPU (after multi-threading).

The current search head is using the default settings of base_max_searchers(4) + cpus(4) * max_searches_per_cpu(4). This = 20

Do you have any justified recommendations for changing the limits for a search-head only host?

[gfriedmann · Accepted solution]

I resolved this. I should have posted my config. My limits.conf was missing the [search] stanza header before these configuration items.