from log I just found, but ulmits are adequate: 01-13-2021 12:05:40.548 -0500 WARN ulimit - A system resource limit on this machine is below the minimum recommended value: system_resource = Data segment size (ulimit -d); current_limit = 134217728; recommended_minimum_value = 536870912. Change the operating system resource limits to meet the minimum recommended values for Splunk Enterprise. 01-13-2021 12:05:40.548 -0500 WARN ulimit - Splunk might not work because a small resident memory size limit has been set. [cb-nimapp1:/opt/splunkforwarder/var/log/splunk]ulimit -a time(seconds) unlimited file(blocks) unlimited data(kbytes) 636870912 stack(kbytes) 32768 memory(kbytes) unlimited coredump(blocks) 2097151 nofiles(descriptors) 8192 threads(per process) unlimited processes(per user) unlimited
... View more