Deployment Architecture

I want to increase base_max_searches in limits.conf, but what is MAX recommended value for this setting?

New Member

I have 4 indexers and 3 search heads and I currently have a */local/limits.conf file as below for my SH settings:

max_count = 50000
distributed_search_limit = 50000

# the maximum number of concurrent searches per CPU
max_searches_per_cpu = 3

# the base number of concurrent searches
 base_max_searches = 10
0 Karma

Super Champion
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...