Splunk Enterprise

Why doesn't splunk recognize our second CPU?

Gregski11
Contributor

All our search heads have dual processors in them but Splunk seems to only recognizes one in each of the three servers based on the number of CPU cores it reports in the Monitoring Console web gui, can Splunk use more than one processor? 

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Can you check what there is added to splunkd.log when splunk has started? There should be that and another information like OS etc. mentioned.

r. Ismo

0 Karma

Azeemering
Builder

Yes Splunk's Minimum search head specification's are:

  • An x86 64-bit chip architecture.
  • 16 physical CPU cores, or 32 vCPU at 2Ghz or greater speed per core.
  • 12GB RAM.

See:

Reference hardware - Splunk Documentation

 

0 Karma

Gregski11
Contributor

@Azeemering wrote:

Yes Splunk's Minimum search head specification's are:

  • An x86 64-bit chip architecture.
  • 16 physical CPU cores, or 32 vCPU at 2Ghz or greater speed per core.
  • 12GB RAM.

See:

Reference hardware - Splunk Documentation

 


thank you, but I don't follow, you shared the minimum specifications and my question was why Splunk does not see the second CPU in our machines, I followed that link and don't see how to engage the other CPU, what am I missing?

0 Karma

Azeemering
Builder

Is it a x86 64-bit chip?

Is it hyperthreaded? Hyper-threading does not add cores as far as Splunk is concerned. 

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...