How to minimize splunk's memory usage

[domengph]

Is it possible to explicitly define how much memory splunk (splunkd and splunkweb) is allowed to use? Thanks

[araitz]

Splunk uses memory in parallel to how much work it is doing. If you are indexing a lot of data, have many concurrent searches, etc than Splunk is going to use a lot of memory in the process of doing the work that you asked it to do.

A better question might be - why would you want to constrain the amount of memory that Splunk uses?

[tmahfoudi]

Ok, so what limits and settings do you need to change for the memory usage to be reduced? I'm having issues with this in our production SLES environment. Anything helps. thanks!

[astubbs]

@gkanapathy can you please add some more information to your answer around the statement "various limits and settings." i.e. what are these settings called, where do you set them etc. i.e. manual page etc?

[gkanapathy]

No it is not. It is only possible to indirectly influence it with various limits and settings.