The CPU usage for our splunk forwarders on our Unix boxes are running between 20% and 35%. What is the normal usage for the forwarders? Do you know what might be causing such a high number? T
drussel - are you using a light or standard forwarder? The latter can be intensive. What size is the box and cpu? Take a look at this - or other threads...useful info. http://splunk-base.splunk.com/answers/5400/high-cpu-usage-on-splunk-forwarder Br Dave
