How high can we safely set max_fd in limits.conf on the forwarder?

[ddrillic]

We have large number of log files to ingest and the machine shows -

$ ulimit -n
64000

How high can we set the max_fd in limits.conf of the forwarder?

[inputproc]
max_fd = <8192 ???>

[Claw · Accepted solution]

This has been answered in this blog.

http://blogs.splunk.com/2011/11/21/whats-your-ulimit/