If the file size in GB's would create any issue in indexing performance?
indexing performaces, and the consequent resources (CPUs) and number of Indexers to use, depend on the volume of logs to index.
Think that an indexer (with the normal hardware reference) can usually index until 200 GB/day, if you haven't ES ot ITSI.
thank you @gcusello for the quick response.
I would like to know single log file being monitored and it does not have any rotation policy. So as time goes file size grow into GB's.
Will the CRC check get time delay due to the file size?
if one answer solves your need, please accept one answer for the other people of Community or tell me how I can help you.
Ciao and happy splunking
P.S.: Karma Points are appreciated 😉