Many small files - high memory usage Splunk Forwarder- Is there a way to reduce?

[nessaner]

Is there a way to reduce memory usage for splunk Forwarder? I have two directories with 57k files each (120Mb each) and After restarting service I checked Task manager and memory usage reach 2Gb. I can't reduce the number of files because I've already done that and can't reduce more. I'm sure that the issue is with those directories because after I delete them from inputs.conf memory reach only 100Mb. 

[gcusello · Accepted solution]

Hi @nessaner,

this is aknown windows problem related to the access to DNS that was solved in a past release.

If it's still present, ask to Splunk Support for the solution.

Ciao.

Giuseppe

[gcusello]

Hi @nessaner,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉