Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How can I increase the speed of parsing on my Heavy Forwarder?

$
0
0
Good day, sirs! What system resource do I need to increase to increase the speed of parsing of my Heavy Forwarder? My instance uses 'batch' monitoring to monitor 21 folders for ingestion but it seems it can't keep up because the files are getting piled in their respective folders waiting for their turn to be parsed and ingested. The process would be: CRON that extracts the file from archives and send to 21 folders(different sourcetypes) -> heavy forwarder monitor those folders -> parse -> send to the indexer. Please enlighten me. Thank you! Regards, Raj

Viewing all articles
Browse latest Browse all 47296

Trending Articles