Getting Data In

There isn't message of "linux transparent hugepage support" in splunkd.log of lately UF.

yutaka1005
Builder

I think that the messages below isn't appear in splunkd.log in UF lately.

INFO ulimit - Linux transparent hugepage support, enabled="never" defrag="never"

I can find it in splunk, but I can't in UF.

Is this a specification?
The THP setting itself is disabled regardless of the presence or absence of a message.

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi yutaka1005,
as you can find in https://docs.splunk.com/Documentation/Splunk/7.0.2/ReleaseNotes/SplunkandTHP THP bring a "30% degradation in indexing and search performance", this means that THP is relevant on Search Head and Indexers, I never disabled THP on Universal Forwarders.

Anyway, if you run the Healt Check, that you can find in the Monitoring Console App (on Splunk Enterprise not on UFs), it shows the presence of enabled or disabled THP.

Bye.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi yutaka1005,
as you can find in https://docs.splunk.com/Documentation/Splunk/7.0.2/ReleaseNotes/SplunkandTHP THP bring a "30% degradation in indexing and search performance", this means that THP is relevant on Search Head and Indexers, I never disabled THP on Universal Forwarders.

Anyway, if you run the Healt Check, that you can find in the Monitoring Console App (on Splunk Enterprise not on UFs), it shows the presence of enabled or disabled THP.

Bye.
Giuseppe

0 Karma

yutaka1005
Builder

Thank you for answer.

So,
you mean that this log is not displayed is a specification, and it is no problem, right?

0 Karma

gcusello
SplunkTrust
SplunkTrust

yes.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...