...ainly doing API calls to pull data. The iops for the indexer is around 1600, cpu usage 50% and memory 31%. Any recommendations on what we can do to improve this, eg. additional indexer? Thanks.
...upport just told us -
-- The Cluster Master is desperately in need of additionalresources, 2 cores and 8 GB of memory is not going to be sufficient.
Since there is no chance for us to get a...
...nly base Splunk 6.1, or is it necessary to download and install additional apps?
If it is possible what would the chart look like?
Thanks in advance.
...uccessfully Here are inputs.conf and props.conf we are using
Inputs.conf
[monitor:///apps/ab_cd/resources/abcd/reports_rr/reports/abc/.../*_splunk.csv]
sourcetype=source_type_name
index=i...
Hi,
I noticed that my io bandwidth is approaching 100% on my servers (though, my overall resources (cpu, mem) are fine. Would adding additional pipelines help here (my guess is no), or do I n...
Hi all,
Splunk newbie with what I hope is a simple question... I have a UF installed on my windows file server, and it is set to monitor a directory--see below
[WinEventLog://Security] ...
new splunk i want to get syslog in splunk, should i install 3rd party app to get syslog? or any other way to get syslog from windows i am using windows 10
Hello I am planning to migrate Splunk Enterprise from a physical server(RHEL7) to a VM(RHEL8). On the new VM, I already installed the latest version of Splunk Enterprise ( 9.0.5). ...
I'm planning to introduce index parallelization into our Splunk deployment given the additionalresources we have on our indexers. In looking at the DMC, specifically under Indexing Performance, I d...
Hello,
before the upgradation to splunk 9.x we have to move the actual instances of Splunk to new VMs with new OS version and additionalresources (CPU, RAM and disk space [indexers]):
c...