- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The monitor input cannot produce data because splunkd's processing queues are full, what do I do to solve this?
abazgwa21cz
Explorer
01-12-2023
09:05 PM
I have and issues with red status : The monitor input cannot produce data because splunkd's processing queues are full. This will be caused by inadequate indexing or forwarding rate, or a sudden burst of incoming data.
i check in Indexing Performance: Instance and almost field had 100%
and when i check CPU and memory used and license used it had alot space
so how can i find the issues and can i fix this problem
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
PickleRick

SplunkTrust
01-12-2023
10:15 PM
The logical thing to do would be to check your IO saturation.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
abazgwa21cz
Explorer
01-12-2023
10:42 PM
how can i check that ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
PickleRick

SplunkTrust
01-12-2023
11:38 PM
iostat/iotop/vmstat, your hardware monitoring tools
Work with your infrastructure team.
