Monitoring Splunk

Distributed Management Console Reporting incorrect amount of CPU cores for indexers

mikaelbje
Motivator

Distributed Management Console Reporting incorrect amount of CPU cores for indexers
This is seen in both Splunk 6.2.6 and Splunk 6.3.0

Environment 1

  • Virtual Search Head has 12 CPU cores according to cat /proc/cpuinfo - Splunk DMC reports 12 cores - CORRECT
  • Physical Indexer 1 has 16 CPU cores according to cat /proc/cpuinfo - Splunk DMC reports 8 cores - INCORRECT
  • Physical Indexer 2 has 16 CPU cores according to cat /proc/cpuinfo - Splunk DMC reports 8 cores - INCORRECT

Environment 2

  • Virtual Search Head has 8 CPU cores according to cat /proc/cpuinfo - Splunk DMC reports 8 cores - CORRECT
  • Physical Indexer 1 has 32 CPU cores according to cat /proc/cpuinfo - Splunk DMC reports 16 cores - INCORRECT
  • Physical Indexer 2 has 32 CPU cores according to cat /proc/cpuinfo - Splunk DMC reports 16 cores - INCORRECT

I checked the output of ps and could see the splunkd process running on all CPU cores, so my question is if this is just a cosmetic bug?

0 Karma
1 Solution

mikaelbje
Motivator

Doh. Turns out looking at cat /proc/cpuinfo isn't enough. It outputs sockets X cores per socket X threads, so 2 sockets with 8 cores each with 2 threads = 31(32) processors in cat /proc/cpuinfo. DMC is correct.

View solution in original post

0 Karma

mikaelbje
Motivator

Doh. Turns out looking at cat /proc/cpuinfo isn't enough. It outputs sockets X cores per socket X threads, so 2 sockets with 8 cores each with 2 threads = 31(32) processors in cat /proc/cpuinfo. DMC is correct.

View solution in original post

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!