Monitoring Splunk

How to minimize splunk's memory usage

domengph
Engager

Is it possible to explicitly define how much memory splunk (splunkd and splunkweb) is allowed to use? Thanks

Tags (2)

araitz
Splunk Employee
Splunk Employee

Splunk uses memory in parallel to how much work it is doing. If you are indexing a lot of data, have many concurrent searches, etc than Splunk is going to use a lot of memory in the process of doing the work that you asked it to do.

A better question might be - why would you want to constrain the amount of memory that Splunk uses?

0 Karma

tmahfoudi
New Member

Ok, so what limits and settings do you need to change for the memory usage to be reduced? I'm having issues with this in our production SLES environment. Anything helps. thanks!

0 Karma

astubbs
Engager

@gkanapathy can you please add some more information to your answer around the statement "various limits and settings." i.e. what are these settings called, where do you set them etc. i.e. manual page etc?

gkanapathy
Splunk Employee
Splunk Employee

No it is not. It is only possible to indirectly influence it with various limits and settings.

Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...