Getting Data In

Indexing Slow

Explorer

Hi Team,

My indexing queue is reaching 90-98% also we have checked the cpu utilization in every indexers ( 30 to 40%) cpu.
Sometimes the data flow is faster and suddenly it becoming slow only from 3 application servers rest of all the servers data flowing faster.

We have not mentioned any configurations in server.conf for indexing queue

environment - "windows servers" 3 indexers (clustering), 1 master.

Thanks,
shaik

Super Champion

Hi there,
What's the daily data volume on your platform ? and do you have data ack enabled for forwarders ?

0 Karma

Ultra Champion

And what kind of storage do these windows servers use?

PS: any particular reason you're running indexers on windows? I believe in general Linux is preferred, also for performance reasons?

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!