Hi All - I've been through all the above chat interestingly I'm seeing the same issue in my Env there're wide range of blocks seen in the events coming from the Heavy forwarders. The thruput values on the Indexer and HF seems to be fair and collides at a point of time in an hour where traffic is more. So, I think the root cause of the blocks is because of the indexer thruput. Correct me if I'm wrong
INFO Metrics - group=queue, ingest_pipe=0, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=1804, largest_size=1954, smallest_size=0
INFO Metrics - group=queue, ingest_pipe=4, name=tcpin_cooked_pqueue, blocked=true, max_size_kb=500, current_size_kb=499, current_size=1914, largest_size=1914, smallest_size=0
Any suggestions will be appreciated.
... View more