Getting Data In

How to have control over the hourly fishbucket snapshots in order to reduce the CPU and I/O impact?

patouellet
Path Finder

Hi,

A couple days ago I posted a question regarding hourly CPU spikes on Universal Forwarder. It was found that the hourly fishbucket snapshots cause a brief CPU and I/O spike.

My new question: In order to reduce the CPU and I/O impact, do we have any control over this process? Anything we could do that would result in reduced CPU usage?

Thank you.

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...