Getting Data In

Will this limit this forwarding speed to the Indexer?

Dark_Ichigo
Builder

Will this limit this forwarding speed to the Indexer?

[thruput]
    maxKBps = <integer>
    * If specified and not zero, this limits the speed through the thruput processor to the specified 
    rate in kilobytes per second.
    * To control the CPU load while indexing, use this to throttle the number of events this indexer 
    processes to the rate (in KBps) you specify. 
0 Karma

jgedeon120
Contributor

Yes it does. It is set to default of 256 on universal forwarders.

0 Karma

Dark_Ichigo
Builder

The Universal Forwarder V.4.3.2 has the following as default which I just installed:

[thruput]
throughput limiting at index time
maxKBps = 0

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...