Getting Data In

There isn't message of "linux transparent hugepage support" in splunkd.log of lately UF.

yutaka1005
Builder

I think that the messages below isn't appear in splunkd.log in UF lately.

INFO ulimit - Linux transparent hugepage support, enabled="never" defrag="never"

I can find it in splunk, but I can't in UF.

Is this a specification?
The THP setting itself is disabled regardless of the presence or absence of a message.

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi yutaka1005,
as you can find in https://docs.splunk.com/Documentation/Splunk/7.0.2/ReleaseNotes/SplunkandTHP THP bring a "30% degradation in indexing and search performance", this means that THP is relevant on Search Head and Indexers, I never disabled THP on Universal Forwarders.

Anyway, if you run the Healt Check, that you can find in the Monitoring Console App (on Splunk Enterprise not on UFs), it shows the presence of enabled or disabled THP.

Bye.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi yutaka1005,
as you can find in https://docs.splunk.com/Documentation/Splunk/7.0.2/ReleaseNotes/SplunkandTHP THP bring a "30% degradation in indexing and search performance", this means that THP is relevant on Search Head and Indexers, I never disabled THP on Universal Forwarders.

Anyway, if you run the Healt Check, that you can find in the Monitoring Console App (on Splunk Enterprise not on UFs), it shows the presence of enabled or disabled THP.

Bye.
Giuseppe

0 Karma

yutaka1005
Builder

Thank you for answer.

So,
you mean that this log is not displayed is a specification, and it is no problem, right?

0 Karma

gcusello
SplunkTrust
SplunkTrust

yes.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...

Expert Tips from Splunk Education, Observability in Action, Plus More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Changes to Splunk Instructor-Led Training Completion Criteria

We’re excited to share an update to our instructor-led training program that enhances the learning experience ...