Where do I configure parallelization settings in an indexer clustering environment?

[ontkanin]

Hi there,

I am trying to configure my Splunk environment (1xSH, 2xIndexers (cluster), 1xClusterMaster) to use parallelization, as described in Parallelization settings.

While I understand that parallelIngestionPipelines should be configured on indexers, I am kind of not very sure where the batch_search_max_pipeline settings should be configured.

• on Indexers?
• on Search Head?
• on Indexers and Search Head?

The documentation is not very clear on that, or I'm not getting it.

Thank you

[sk314 · Accepted solution]

From the docs at http://docs.splunk.com/Documentation/Splunk/6.4.0/Knowledge/Configurebatchmodesearch#Configure_batch...

You can enable and configure batch mode search parallelization with an additional set of limits.conf parameters. This is an indexer-side setting. It needs to be configured on all of your indexers, not your search head(s).

[ontkanin]

Thanks a lot sk314. I must have been blind for not seeing that sentence. I really appreciate your help.

[sk314]

You are welcome. To be fair, It's a couple of links down the chain...