Is there a version that doesn't have high CPU usage like in 9.0.2?

[_pravin]

Hi Community,

I have upgraded the Splunk cluster to version 9.0.2 and noticed high CPU usage in the cluster search head. This almost causes memory usage to go high as 90%. The same works fine in 8.1.0 version.

Just checking if someone has noticed similar issues when migrating to 9.x version. Was there a version that didn't have issues? What did you do to fix the issue?

Regards,

Pravin

[jbuckner85]

The same thing is happening to us. We have seen that the Splunkd process takes up to 12 GB of RAM on clustered search heads when previously it was using 4-5 GB. 

[_pravin]

Actually, we had the similar issue recently when the server memory shot up. Actually it was some splunkd process in the background that used all the memory. We couldn't figure out what was the exact process that caused the problem.

You could try is stop splunk cluster, kill all the splunkd process, and then restart the splunk binary or directly stop splunk, restart the sever, and start splunk.

[ssuluguri]

Even I am facing the same issue and CPU is at 100% .

Can anyone help here .

[_pravin]

Hi @ssuluguri ,

Whenever there is an upgrade the CPU usage increases a bit but the major problem came from the data model accelerations. So what I did was reduce the concurrent summarization threads used by data models and increase the summarization period. This helped me reduce the CPU usage for the Splunk install.

You could also give it a try and let me know if that helped you.

Thanks,

Pravin