Monitoring Splunk

Why is my CPU core count wrong?

cwilmoth
Path Finder

We have recently switched our Splunk environment over to larger physical servers running 2 - Intel Xeon E5-2695 v3 processors each. These are 14 core processors, so each machine should be showing 28 cores. However, when I query the server info REST endpoint, it only shows 14 cores each. So I'm sure this is causing issues with performance since Splunk sets parameters based on number of cores. Also, our Enterprise Security app is complaining that the search head doesn't meet the minimum required specifications for hardware.

Please advise.

Thanks.

Tags (3)
0 Karma

cwilmoth
Path Finder

According to Splunk support, this will be fixed in the 6.3.5 release which is not out yet...

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

If you didnt get this resolved, can you open a ticket with support and let them run it through our diag tools..

0 Karma

jakeprevatt
New Member

Good question 😉

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

  Ready to master Kubernetes and cloud monitoring like the pros?Join Splunk’s Growth Engineering team for an ...

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...