Hello ,
We have problem with Splunk forwarder usage. Will limiting the maxkbps=0 increase the speed of CPU usage and also data transmission as out maxkbps=256(default).
Is it this that needs to be changed? Where we do we make this change? I can see this setting under the SplunkLightForwarder app in all the search heads and indexer.
Will the following doc help?
http://docs.splunk.com/Documentation/Splunk/6.4.2/Troubleshooting/Troubleshootingeventsindexingdelay