Splunk ITSI

Muliple JAVA process on ITSI server

ips_mandar
Builder

HI,
I have dedicated serach head for ITSI on windows OS. I have ITSI version 4.0.4 and I have installed Java SE Development Kit 8. But when itry to create notable event aggregation policies then multiple java instance are running which in turn CPU utilization goes to 100.
so what can be issue due to which multiple java process are running?
I would appreciate any ideas?
it seems hardware is enough but not understand about multiple java instance..
Thanks

0 Karma

srinivasmanikan
Engager

That Java processes are created by rules engine
rules engine is used by grouping policy
In this case we have to go to the scheduled search and there we have ITSI_Event_grouping
we need to kill this job so it will again restart the job then our CPU comes down

0 Karma

skoelpin
SplunkTrust
SplunkTrust

You probably don't want to hear this, but you should run it on *nix. I would recommend opening a support case

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...