Splunk Enterprise

Why does Splunk logging driver have very high cpu usage?

cyberglad
Loves-to-Learn

using Http Event Collector, splunk loggin driver consumes too much CPU: 94-100%

anyone knows what's the reason behind it and how to det it down?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Short answer - your CPU is at constant 100% because your system is overutilized.

Long answer - most probably you're sending more data than the host can handle. Check your pipelines, check your inputs and outputs. Check your memory usage. There are so many things that can be wrong here.

Your question is about as detailed as "my car won't go when I press the accelerator pedal" when we don't know if you're out of gas, the battery is dead or whether you simply forgot to put it in gear.

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...