Where you able to fix this? ... View more

tkoster8 - did you find a solution? I'm seeing the same issue on a server in my environment. jessec_splunk - The documentation you referenced says "For universal forwarders, a single pipeline set uses, on average, around 0.5 of a core, but utilization can reach a maximum of 1.5 cores. Therefore, two pipeline sets will use between 1.0 and 3.0 cores. If you want to configure more than two pipeline sets on a universal forwarder, consult with Professional Services first.” Would adding an additional pipeline for the UF reduce CPU utilization?   ... View more

Hi Thomas - We just submitted the Slack App for Splunk Add on to be hosted on Splunkbase. You can also download it here: https://splunkbase.splunk.com/app/4173/ Thanks, Caroline ... View more

Yea. That doesn't sound right. I won't if there are other config at play here. Like maybe a default stanza that has changed the initCrc for all inputs... ... View more

Do you have an ETA on when the new version will be released? I currently have over 200 inputs configured. Over 100 of them are cloudwatch logs inputs. Seems the UI tops out at 178 inputs viewable for some reason. ... View more