Getting Data In

Thread count of splunk keeps on changing in linux?

Deepali529
Explorer

Hi, I am trying to find the subthread_count of logfiles of splunk on linux by command ps -eLo user=|sort|uniq -c > subthread_op

When I executed this command the subthread count was:
1 chrony
2 dbus
6 polkitd
2 postfix
274 root
but when I executed this command after few days subthread_count was:
1 chrony
2 dbus
6 polkitd
2 postfix
278 root.

Also, can anyone help me in which directory I have to execute command "find . -type f -name ".log*"| wc –l to find the logfiles of splunk?
Does all logfiles end with .log extension in splunk?

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

To find Splunk's log files, use this command: ls $SPLUNK_HOME/var/log/splunk.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...