S.o.S Splunk on Splunk: Is there a description of the CPU and Memory usage charts?

[jamiefaulds]

I haven’t been able to find a description of what exactly the Splunkd server and Searches are describing on the CPU/Memory usage charts. I was assuming that Searches are part of Splunkd server?

We are using Splunk on Splunk version 3.2.1 - build 247062

Could you provide a description of each?

Thanks

[hexx · Accepted solution]

These are process types.

• "splunkd server" is associated with the main splunkd process and its helper / process-runner.
• "searches" is associated with search processes. While these are also named "splunkd" they are very different invocations of that binary than the main splunkd service, which is a long-running process. Search processes only run until the search is finished, after which they are terminated.