Getting Data In

Will this limit this forwarding speed to the Indexer?

Dark_Ichigo
Builder

Will this limit this forwarding speed to the Indexer?

[thruput]
    maxKBps = <integer>
    * If specified and not zero, this limits the speed through the thruput processor to the specified 
    rate in kilobytes per second.
    * To control the CPU load while indexing, use this to throttle the number of events this indexer 
    processes to the rate (in KBps) you specify. 
0 Karma

jgedeon120
Contributor

Yes it does. It is set to default of 256 on universal forwarders.

0 Karma

Dark_Ichigo
Builder

The Universal Forwarder V.4.3.2 has the following as default which I just installed:

[thruput]
throughput limiting at index time
maxKBps = 0

0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...