Deployment Architecture

Heavy forwarder too much ram in cache

nicolsa
Observer

Hello,

we we have heavy forwarder that take too much Ram in cache. How to find which   Splunk /functionnality/saved_search/othercould be set in Ram cache and limit it ? (Around tens of gigabytes taken).

 

thank you

Labels (1)
Tags (1)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.