How can I calculate the max number of concurrent search on IDX?

[brandy81]

Hi, Splunker!

I have a question about the max number of concurrent searches in indexer cluster and search head cluster environment.

Let’s say there are 3 sh and 5 idx nodes. This is the indexer cluster and search environment.
3 SH each has 16 cpu cores and 5 IDX each has 12 cpu cores.

According to limits.conf at SH, 22 concurrent searches are available. (16 cores+6 base search)

1. What is the max number of concurrent searches in cluster wise? 22 or 22 * 3 = 66?
2. Do IDXes have to have the same limits.conf with SH? Configuration related to concurrent searches should be same?
3. At IDXes, are 22 concurrent searches maximum? My question is if the max number of concurrent search at IDXes is based on limits.conf on IDX or on SH or neither of them. How can I calculate the max number of concurrent search on IDX?

[ivanreis]

check this document
https://docs.splunk.com/Documentation/Splunk/7.3.2/Capacity/Accommodatemanysimultaneoussearches

[gcusello]

Hi brandy81,
for my knowledge concurrent searches are calculated at server level, not at cluster level.
You can see them using Monitoring Console.
Ciao.
Giuseppe