Getting Data In

Will this limit this forwarding speed to the Indexer?

Dark_Ichigo
Builder

Will this limit this forwarding speed to the Indexer?

[thruput]
    maxKBps = <integer>
    * If specified and not zero, this limits the speed through the thruput processor to the specified 
    rate in kilobytes per second.
    * To control the CPU load while indexing, use this to throttle the number of events this indexer 
    processes to the rate (in KBps) you specify. 
0 Karma

jgedeon120
Contributor

Yes it does. It is set to default of 256 on universal forwarders.

0 Karma

Dark_Ichigo
Builder

The Universal Forwarder V.4.3.2 has the following as default which I just installed:

[thruput]
throughput limiting at index time
maxKBps = 0

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...