The splunkd process only uses the power of one logical core dispatch on all processors. Is there a way to use all the available processor power in a pattern search for example?
thx for your help
Pierre
Hi splunkLPN,
have a look at the docs about Splunk 6.3 http://docs.splunk.com/Documentation/Splunk/6.3.1/ReleaseNotes/MeetSplunk This was one of the key things introduced with 6.3
Search Parallelization. Optimized CPU utilization for faster search execution.
Index Parallelization. Optimized CPU utilization for faster data ingestion.
Read more about the topic and setting here
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Capacity/Parallelization
and here
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Knowledge/Configurebatchmodesearch
Hope the helps ...
cheers, MuS