We have a heavy forwarder running some Add-ons, and one of them (SNow) is eating up all the memory.
We have workload management enabled on our search head clusters for cpu/memory management, but wanted to see if it's possible to restrict mem/cpu usage for ingest on the HF using WM. If that's a possibility, where would I edit settings to update the configurations accordingly?
