Universal forwarder consume

[rjfv8205]

Hello everyone, please could you tell me how universal forwarder consume? (disk, ram, cpu)

Thank you in advance and happy splunking

[pruthvikrishnap]

HI,

on an average a forwarder is designed to consume not more than 3% of CPU, this completely depends on the inputs and outputs which are mentioned. there are few components such as pollPeriod, queueSize
which can consume a lot and can even collapse the cluster.

[rjfv8205]

Thanks, and disk utilization? what about it?

[lakshman239]

The resource consumption is usually very low. Pls also check https://answers.splunk.com/answers/236233/universal-forwarder-resource-footprint-estimation.html