I am seeing this error on one of my HWF, any clues to fix the issue?
Hi @Knightrider1234 ,
Try the below changes to resolve the issue.
1) change the thruput value in limits.conf (/opt/splunk/etc/system/local/limits.conf)
maxKBps = 0
2) Increase the pipeline and do the changes in /opt/splunk/etc/system/local/server.conf
parallelIngestionPipelines = 2
3)Increase the parsing queue size in /opt/splunk/etc/system/local/server.conf
maxSize = 64MB
After making the changes restart the Splunk server.
View solution in original post