I set the maxThreads parameter in my server.conf file based upon the documentation http://docs.splunk.com/Documentation/Splunk/6.2.4/admin/Serverconf . After restarting Splunk, I see the number I set in the splunkd.log file in the following line.
08-03-2015 11:59:17.433 -0700 INFO loader - Limiting REST HTTP server to xxxx threads
I also noticed another setting which sets the maximum number of threads which has a different value.
08-03-2015 11:59:14.046 -0700 INFO loader - Maximum number of threads (approximate): yyyy
What is the difference between these, and how can I increase the latter?
The maxThreads setting configures the number of threads the Splunk REST server can use. The maximum number of available threads referenced is acquired by Splunk from the host computer. It is derived from a number of different calculations based upon the memory of the system, and supersedes the maxThreads setting.
To increase the total maximum number of available threads Splunk can use, it is essential to increase the memory of the computer on which Splunk in running.
The maxThreads setting configures the number of threads the Splunk REST server can use. The maximum number of available threads referenced is acquired by Splunk from the host computer. It is derived from a number of different calculations based upon the memory of the system, and supersedes the maxThreads setting.
To increase the total maximum number of available threads Splunk can use, it is essential to increase the memory of the computer on which Splunk in running.