need to check where is ulimit value

[Praz_123]

How can i find ulimit value/status for all server in monitoring console.

[gcusello]

Hi @Praz_123 ,

if you'r speaking of ulimit of Splunk Servers, you can use the Monitoring Console health Check.

If you're speking of Forwarders (Universal or Heavy it's the same), there's no direct solution and you should use the solution from @livehybrid: a shall script input (to insert in a custom add-on) that extract this value and sends it to the Indexers.

Ciao.

Giuseppe

[SanjayReddy]

Hi @Praz_123 

you can use rest call in moniotring console for getting inforamtion for SH and Indexers information

| rest splunk_server=<server name> services/server/sysinfo | eval "RAM GB"=round(physicalMemoryMB/1024)
| table os_name os_build cpu_arch "RAM GB" numberOfCores numberOfVirtualCores transparent_hugepages.defrag transparent_hugepages.enabled transparent_hugepages.effective_state ulimits*
| rename os_name as "Opeating System" os_build as "OS Build" cpu_arch as "OS Arch" numberOfCores as "Physical Cores" numberOfVirtualCores as "Virtual Cores" transparent_hugepages.defrag as "THP Defrag" transparent_hugepages.enabled as "THP enabled"

you can use following rest call to run in CLI as well

curl -k -u admin:changeme https://localhost:8089/services/server/sysinfo

[livehybrid]

well TIL… thanks @SanjayReddy 

[kiran_panchavat]

@Praz_123 

There are a few ways you can check your ulimit settings.

• The monitoring console includes a health check for ulimits. See https://docs.splunk.com/Documentation/Splunk/9.4.0/DMC/Customizehealthcheck 

• Each time the Splunk Enterprise service is started or restarted, it will report on the ulimits. You can search the internal logs for the report using:

[livehybrid]

Hi @Praz_123 

You may be able to create a simple app to push out to your instances which runs a modular input to capture this, but in terms of out-of-the-box functionality, unfortunately this isnt available at the moment.

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will