I want to know abount how much splunk universal forwarder consume cpu.
Have any materials about that? I found everywhere in google and splunk documentation page but I counldn't found any materials
I want version 7.x material.
I want material as soon as possible.
For monitoring the resource usage on Splunk universal forwarder, you need to enable an add-on like below.
The introspection generator add-on is disabled by default on a universal forwarder. To enable: in the forwarder's $SPLUNKHOME/etc/apps/introspectiongenerator_addon/local/app.conf, set
state = enabled
To monitor UF resource usage in Monitoring console, please follow below doc:
This can be hard to quantify, because it will depend on a lot of factors. Here is the documentation on monitoring files and directories:
A few things I have run into that can help keep CPU usage lower:
Hope this helps somewhat.