High CPU usage after upgrading splunk to 9.0.2, is this expected?

[ssuluguri]

Hi team,

I am observing high CPUusage touching 100% after splunk upgraded to 9.0.2 , is this expected ? If so , please share the recommended remedy .

Thanks
Sathish S

[ssuluguri]

Thank you , we have increased our CPU cores , will monitor for couple of days 

[LRF]

@Hi @ssuluguri,

I'm not sure if that's the case, but version 9.0.4 solved several issues included thread and memory usage

Fixed issues

SPL-230581, SPL-227411	After upgrade one set of clustered indexers has increase in thread crashes during search
SPL-231852, SPL-230091	Search utilize huge memory on only one indexer.

Hope this will help you, have a nice day,

Fabrizio