What settings should we change to increase the number of concurrent searches running .Following is the setting that we have nowWe have 4 searches with 40 CPU each .So I assume a total of 184 concurrent searches can be ran .I am continusly getting message saying maximum number of concurrent searches has reached and some of the alerts are getting skipped.
base_max_searches = 6
The maximum number of concurrent searches per CPU.
max_searches_per_cpu = 1
Please advice on this .Thanks in advance
I would recommend adding more CPUs to your search head before you go adjusting those limits. You'll be happier in the long run.