Getting Data In

Increase Throughput Limit on a Lightweight Forwarder

pj
Contributor

Quick question -

I realise that putting a forwarder into lightweight mode will automatically limit throughput by default to 256Kbps.

Can I add in a limits.conf entry to the etc/system/local folder on the forwarder and increase this limit to say 500Kbps?

e.g.

[thruput]
maxKBps = 500

Will this override the 256 limit in the lightweight forwarder or is the limit fixed, because it is lightweight or something?

Many thanks

1 Solution

bwooden
Splunk Employee
Splunk Employee

You are correct. Settings in local override settings in default. It is not fixed due to it being a light weight forwarder. It is simply a default value that can be overwritten as you mention. Splunk docs on configuration file precedence contain more details.

View solution in original post

bwooden
Splunk Employee
Splunk Employee

You are correct. Settings in local override settings in default. It is not fixed due to it being a light weight forwarder. It is simply a default value that can be overwritten as you mention. Splunk docs on configuration file precedence contain more details.

yannK
Splunk Employee
Splunk Employee

if ypu use this setting, it will be unlimited (as on heavy forwarders, and indexers)


[thruput]
maxKBps = 0

0 Karma

pj
Contributor

This fact should really be added to the documentation around the lightweight forwarder differences.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...