Splunk Search

Does Splunk support CUDA?

kengilmour
Path Finder

Hello,

It seems our demands for parallel and real-time queries in Splunk are increasing exponentially the more business users see it.

Now this is creating a resource problem on our servers. We're currently running about 20 queries in parallel at all times (ignoring real time queries) and we keep having to add more CPU cores in order to run more searches and correlations.

So to this end, does Splunk support CUDA? I'd rather to run more queries slowly in parallel than to have queries cancelling due to lack of resources.

Thanks!

Ken

Tags (1)
0 Karma

dwaddle
SplunkTrust
SplunkTrust

Splunk does not support CUDA. And, typically, Splunk environments run out of I/O bandwidth well before CPU. (Yours may not be typical if you are running out of CPU before starving the CPU due to insufficient I/O bandwidth)

In your shoes, I'd make sure I'm actually running out of CPU and not just hitting an artificial limit. Then, probably, install more indexers ...

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...