I have 16 core CPU on search head which accommodate 22 concurrent searches by default. When 22 concurrent searches is reached, it shows limit has been reached, but the CPU utilization is only 20 percent.
Can we increase the max_searches_per_CPU=2 or 3 in order to accommodate more historical concurrent searches. Does this have any performance issues?
Why does Splunk have default value=1?
↧
