Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Why are we seeing an issue with an EXTREMELY busy forwarder bogging down our indexers?

$
0
0
Recently, indexing from that particular forwarder has gotten to be even slower, sometimes falling hours behind. I'm curious as to what the recommendation from the community may be: 1. Configure improved load balancing with props.conf with EVENT_BREAKER_ENABLE setting to true. 2. Changing existing forceTimebasedAutoLB settings to a shorter interval 3. Something else Our version is 7.0.2

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>