we have a cluster environment with 6 indexers. Each host has 128GB Ram, but as I see Splunk using only ~4GB.
Is there any chance to optimize (speedup) memory usage and let splunk to use for example 100GB of RAM ?
I have tons of different indexers with different dashboards ....
If yes, how to do it ?
If you are using systemd for for starting splunk, check from unit file what there is defined for memory size.