Getting Data In

'Nice' a scripted input

Curt_Collins
Splunk Employee
Splunk Employee

Hi all,

Is there a way to "nice" a scripted input process so that it doesn't swamp the CPU? I have a scripted input on a LWF that is fairly CPU intensive if you just let it run. I'd like to "nice" it down to a level where it doesn't swamp the CPU.

The script doesn't need to run in a certain amount of time, so just nicing it down should be ok. I'm open to other approaches as well if people have solved this a different way. It would also be good to know how to do this on a Windows machine as well.

Thanks, Curt

1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You could simply wrap your program inside a shell script that calls your program with "nice", and call that one as your scripted input instead:

#/bin/sh

nice -10 myprogram

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You could simply wrap your program inside a shell script that calls your program with "nice", and call that one as your scripted input instead:

#/bin/sh

nice -10 myprogram

araitz
Splunk Employee
Splunk Employee

I would highly recommend throttling utilization within your script rather than relying on NICE, both for portability and for performance reasons. In other words, if your scripted input is causing a resource problem on your machine, then you are just band-aiding the process by using NICE.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...

Deep Dive: Optimizing Telemetry Pipelines in Splunk Observability Cloud

In this session, we will peel back the layers of Splunk Observability Cloud’s cost-optimization features. ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...