Splunk Search

memory SH cluster

gitingua
Engager

Hello! I ran out of memory for the search head located in the cluster. The status is "AutomaticDetention". Is it possible to somehow transfer data to another SH

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @gitingua,

Sorry but I don't understand your questions:

what do you men with "transfer data to another SH"? SHs haven't data.

Then I don't understand when you say "I ran out of memory for the search head located in the cluster": are you using less the the hardware reference in your SHs?

Did you monitored with the Monitor Console the memory load on your SHs?

Ciao.

Giuseppe

 

0 Karma