Out of 19 windows servers running the same services, there is one server that keeps on blocking at parsingQueue. I have increased the size to 30MB while the others remain under 10MB, but it keeps on blocking.
I ran the following code to check how many events hit each server and found that they are all even:
index=_internal host=* group=queue name=parsingqueue | timechart span=60m limit=0 count by host
Next, I ran this search to check the size of the queue and found that while the rest of the servers are at about ~1000, the server that is blocking is above 70K!
index=_internal host=* group=queue name=parsingqueue | timechart span=60m limit=0 sum(current_size) by host
They are all running with the same system specs: 64-bit, 3.07GHz, 12 core, 6 cores per CPU and 96 gigs of RAM. They all have plenty of disk space, as well. Is there a way to check the increase/output rate for the queue? Also, I am not sure how far to increase before it becomes dangerous. Is there anything else I have missed?
TIA,
Skyler
↧