Hello,
we we have heavy forwarder that take too much Ram in cache. How to find which Splunk /functionnality/saved_search/othercould be set in Ram cache and limit it ? (Around tens of gigabytes taken).
thank you
