All,
I am trying to understand how I can have full queues on a heavy forwarder but have plenty of CPU and RAM available. Is there something I am supposed to do to get Splunkd to use the resources available? Increase queue sizes or tell it to use more cores?
thanks
-Daniel
↧