Splunk Enterprise

Why does Splunk logging driver have very high cpu usage?

cyberglad
Loves-to-Learn

using Http Event Collector, splunk loggin driver consumes too much CPU: 94-100%

anyone knows what's the reason behind it and how to det it down?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Short answer - your CPU is at constant 100% because your system is overutilized.

Long answer - most probably you're sending more data than the host can handle. Check your pipelines, check your inputs and outputs. Check your memory usage. There are so many things that can be wrong here.

Your question is about as detailed as "my car won't go when I press the accelerator pedal" when we don't know if you're out of gas, the battery is dead or whether you simply forgot to put it in gear.

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...