indexThreads: 24 cores , indexthread auto set to 8? Can we increaes it

[mkelderm]

I have a system with 12 cores, (24 with hyperthreading). Splunk is setting the indexThread value to 8:

index="_internal" source=*splunkd.log indexProcessor AND indexThreads AND param AND autotuned

Splunk is is behind in indexing the data (few hours). So I want to increase the number of index threads. Splunk recommends to leave this value untouched:

http://docs.splunk.com/Documentation/Splunk/latest/Admin/indexesconf

What happens if I force this value to 16?

Marc

[gkanapathy · Accepted solution]

Don't do it, and it won't help.