Monitoring Splunk

Is there any correlation between CPU utilization and high IOWait?

mohdmikhael
Explorer

Hi Splunk gurus,

Just wanted to enquire if anyone has seen any correlation between high IOWait and CPU utilization? I have a client that is experiencing some search performance issues after upgrading from version 8.2.9 to version 9.0.6. Their users are complaining about search lag and overall slowness in Splunk Web when running searches.

Just curious if anyone has encountered this? Thank you in advance for any answers given 🙂

 

Mikhael

Labels (2)
0 Karma

_JP
Contributor

Can you describe your deployment a bit - # search heads, # indexers, are they on VMs or bare metal, maybe share a screenshot where you are seeing this high IOWait vs CPU (e.g. are you seeing this in a Splunk dashboard or from OS tools).

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...