Splunk ITSI

100% CPU on Splunk Insights for Infrastructure central collector server

s2801871r
Explorer

We are seeing high CPU 100% on the server always. It is very slow. The SII is deployed on a Windows 2012 R2 server. We see that there are 6 splunkd services running average 11%. Why there are so many processes running and how can we fix this high CPU issue?

0 Karma

mattymo
Splunk Employee
Splunk Employee

Hi s2801871r!

What are the specs? Which version of SII?

What inputs have you enabled and from how many servers?

- MattyMo
0 Karma

s2801871r
Explorer

Following is the SII information:
Splunk Insights For Infrastructure

Version ..................................................................................1.1.0
Build ..................................................................................2
Server .................................................................................. 4 CPU 8 GB RAM
Splunk TA AWS Version ..................................................................................4.5.0
Splunk Version ..................................................................................7.1.0
Splunk Build ..................................................................................cc33fbdac2cf

We are have 35 entities syncing metrics. do you need any additional information?

0 Karma

mattymo
Splunk Employee
Splunk Employee

What input are the entities using (collectd? aws? windows?)

- MattyMo
0 Karma

s2801871r
Explorer

collectd from Linux and windows. No AWS.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...