Monitoring Splunk

How to optimize processor usage on Mac OS by the splunkd process?

splunkLPN
Path Finder

The splunkd process only uses the power of one logical core dispatch on all processors. Is there a way to use all the available processor power in a pattern search for example?

thx for your help
Pierre

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi splunkLPN,

have a look at the docs about Splunk 6.3 http://docs.splunk.com/Documentation/Splunk/6.3.1/ReleaseNotes/MeetSplunk This was one of the key things introduced with 6.3

Search Parallelization. Optimized CPU utilization for faster search execution. 
Index Parallelization. Optimized CPU utilization for faster data ingestion.

Read more about the topic and setting here
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Capacity/Parallelization
and here
http://docs.splunk.com/Documentation/Splunk/6.3.1511/Knowledge/Configurebatchmodesearch

Hope the helps ...

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...