Hello, I have a deployment server with the Deployment Monitor app installed. We currently rely on the the "missing forwarders" tool to send ourselves notifications. Our results are intermittent. I've done some investigation in the splunkd.log, and see the following error message: "StatsProcessor - reached limit max_mem_usage_mb=200, results may be incomplete". It is possible to increase the number from the default of 200 to something greater, but what I do not know what the ramifications are. Anyone dealt with this before?
You can adjust this in limits.conf, but you should read this post first:
http://answers.splunk.com/answers/64666/the-specified-span-would-result-in-too-many-50000-rows
You can adjust this in limits.conf, but you should read this post first:
http://answers.splunk.com/answers/64666/the-specified-span-would-result-in-too-many-50000-rows