Getting Data In

What is the CPU & memory utilization of Splunk Forwarder?

govinduk
New Member

Hi Friends,

I want to know 2 things as mentioned below:

  1. What is the typical CPU & Memory consumption of Splunk Forwarder?
  2. Can we set the limit on CPU & Memory utilization by Splunk Forwarder?
0 Karma

EmilyStinson
Loves-to-Learn

I don't know much about it. I also want to know about the memory boards utilization of Splunk Forwarder.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

As usually that depends on what you have on those UF / HFs. How many logs, what are volumes of events and in HF have you running also some other inputs like DBX etc.

You should use your normal monitoring tools to see what happenings on UFs. With HF you could also use MC (monitoring console) and add those HF's as indexer to it. Then just create own custom group for those and separate for real indexers and then you could follow up those with MC. After that you could also see some other splunk's internal metrics like HEC statistic, some queues, pipelines etc. on those.

There is also on request in https://ideas.splunk.com/ideas/EID-I-88 to get own role for HF on MC.

r. Ismo

0 Karma

ddrillic
Ultra Champion

1 What is the typical CPU & Memory consumption of Splunk Forwarder?
- It really varies based on what you monitor. Monitoring databases, hadoop, etc, can be taxing...

2 Can we set the limit on CPU & Memory utilization by Splunk Forwarder?
- Unfortunately, Splunk lacks hadoop like queues and features to constrain resources.

0 Karma

adonio
SplunkTrust
SplunkTrust

hello there,

  1. most of the times between 1% -2% CPU and low memory usage
  2. I don think there is such a configuration, you can however limit it on the OS (Windows or *nix) side

hope it helps

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!