I have the same problem too but no memory swap issue.
Execution costs
Duration (seconds) Component Invocations Input count Output count
0.02 command.dedup 16 596 187
0.01 command.fields 15 2,869 2,869
0.02 command.prededup 15 2,869 596
0.02 command.rename 16 187 187
0.74 command.search 30 2,869 5,738
0.40 command.search.index 789 - -
0.08 command.search.fieldalias 9 2,869 2,869
0.07 command.search.calcfields 9 2,869 2,869
0.02 command.search.filter 24 - -
0.00 command.search.index.usec_1_8 242 - -
0.00 command.search.index.usec_8_64 6 - -
0.28 command.search.typer 9 2,869 2,869
0.12 command.search.lookups 9 2,869 2,869
0.08 command.search.kv 9 - -
0.04 command.search.rawdata 9 - -
0.01 command.search.tags 9 2,869 2,869
0.00 command.search.summary 15 - -
0.00 dispatch.check_disk_usage 1 - -
1.42 dispatch.createdSearchResultInfrastructure 1 - -
0.32 dispatch.evaluate 1 - -
0.32 dispatch.evaluate.search 1 - -
0.00 dispatch.evaluate.dedup 1 - -
0.00 dispatch.evaluate.rename 1 - -
2.30 dispatch.fetch 16 - -
0.00 dispatch.localSearch 1 - -
0.84 dispatch.parserThread 14 - -
0.00 dispatch.preview 3 - -
0.00 dispatch.readEventsInResults 1 - -
0.02 dispatch.results_combiner 16 - -
0.00 dispatch.stream.local 1 - -
0.73 dispatch.stream.remote 14 - 436,030
0.31 dispatch.stream.remote.splunkqa2i 4 - 176,291
0.19 dispatch.stream.remote.splunk4i 4 - 121,692
0.19 dispatch.stream.remote.splunk2i 4 - 129,755
0.04 dispatch.stream.remote.splunk1i 2 - 8,292
0.18 dispatch.timeline 16 - -
3.05 dispatch.writeStatus 11 - -
0.38 startup.configuration 5 - -
8.06 startup.handoff 5 - -
... View more