We are pulling from an HP NON-STOP Queue. We have increased the maxThreads, maxSessions,sessionTimeout = 30d in server.conf. The queue collects for 20 minutes then we see it grow....soon we get the messages around the REST API token being invalid or Splunkd has exited. We commented out the SSL3 setting in the Jvm settings and we set the memory heap in the JMS.PY file to 512k and 1024mb respectively. There is nothing in the Splunkd until it sends the messages about 20 minutes after the agent starts. My assumption is that this means that Splunkd will not return errors until some process lets it go. The message time stamp is right at the time the queue begins to fill. Thanks for any help you may have.
6gb Memory 2.5g available
↧