We are currently running a distributed Splunk 6.2.3 infrastructure with multiple indexers.
According to the Distributed Management Console Resource Usage, each indexer shows "Physical Memory Usage(%)" as being > 96.5%.
I ran the command `free -htlw` on one of the indexers, and received the following results:
total used free shared buffers cache available
Mem: 188G 2.1G 5.6G 24M 215M 180G 186G
Low: 188G 183G 5.6G
High: 0B 0B 0B
Swap: 4.0G 3.6M 4.0G
Total: 192G 2.1G 9.6G
Based on this information, I question the authenticity of that which is being reported by the Distributed Management Console. If someone could clarify exactly how these values differ, it would be greatly appreciated.
Thank you.
↧