Quantcast
Channel: Questions in topic: "universal-forwarder"
Viewing all articles
Browse latest Browse all 1551

Why are the Universal Forwarders CPU spiking every hour?

$
0
0
Hi, I have over 150+ UF and they all behave the same. splunkd CPU usage is about 5% but every hour it spikes, up to 50-60%. This has been going on for many months. I have AIX and Linux UF and they all behave the same. If I do a fresh install, it doesn't do that. But over time, the spike starts to happen. Recently, to test, I upgraded two AIX UF from version 6.5.2 to 7.0.2. On one, I wiped out the entire install folder, basically started from scratch. There is no more spike on this one (but only a matter of time before it does it again). On another, I simply upgraded over the existing install. The spike remained the same. Something in splunkd is using more CPU over time, every hour. I would like to know what it is so I can possibly disable/play with it. splunkd CPU usage on my servers needs to be as low as possible. Are people using UF on AIX and Linux seeing this too? Below: UF that I wiped clean before reinstalling. We can see the spikes stoping after fresh install. ![alt text][1] Below: UF that I simply upgraded. Spikes remains. ![alt text][2] [1]: /storage/temp/230704-2018-03-14-11-41-28-ui-top-aix-processes-system-re.png [2]: /storage/temp/230705-2018-03-14-11-46-44-ui-top-aix-processes-system-re.png

Viewing all articles
Browse latest Browse all 1551

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>