I am looking at the queues on my heavy forwarder tier which I use to proxy all our Universal Forwarders. The queues are looking full lately, it seemed to creep up on us. Any recommendation on determining which config might be causing issues?
Which queues specifically are being blocked up? Depending on where the blocking is occurring will help determine what might be going on. Have you tried using the DMC to visualize the queues?
If the index queue is being blocked on the Heavy Forwarder than yes the maxKbps setting may apply.
My limits.conf setting for my Heavy Forwarders is this -
[root@LOCATIONp01SPLUNK303 default]# pwd
[root@LOCATIONp01SPLUNK303 default]# cat limits.conf
maxKBps = 0