We have forwarders installed on our Domain Controllers to get the Windows event logs. Our Domain Admin is excited about memory usage. Is there a setting in limits.conf that would allow me to cut down the amount of memory the forwarder uses? I'm seeing 2 GB being held by the forwarder based on looking at the memory use graph before and after stopping the forwarder service.
I've seen documentation that says the forwarder does not hold the memory "tightly" and would release it to other tasks. Is there any discussion on how that works?
