Hello!
I am looking at the "Search Activity" dashboard, in particular the "Search Concurrency" section. Here is what I see:
My question: how are the various limits calculated? Do I have a limit of 22 or 44? Is the limit value 5 for summarization considered or do I add them to have 49 concurrency limit?
Since I read that Splunk's concurrency limit is equal to the number of CPU cores, and my server has 16 CPU cores, wouldn't the limit be 16? What am I missing?
I've looked at the documentation for this dashboard here, but it doesn't provide any useful information.
Any feedback would be great!
Thanks!
Andrew
A lot of the data for that dashboard comes from REST calls. If you click on the magnifying glass icon in any of those panels a new browser tab will open with the relevant search.