Videos

  • Add Videos
  • View All

Top Content 

1 Count failures and success via transaction

Count failures and success via transaction

Latest Activity

Profile IconWilliam S and Please... Dee Esssss :-) joined splunkninja
1 hour ago
Amine Recoba is now a member of splunkninja
yesterday
Welcome Them!
Michael Wilde replied to Nikita's discussion Count failures and success via transaction
"How are these transactions linked together... by a field called "ID"?  If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it.   Paste some samples and…"
Friday
Linus Myrefelt updated their profile
May 22
Marie updated their profile
May 21
Marie is now a member of splunkninja
May 21
Welcome Them!
Profile IconJitter and matthew arguin joined splunkninja
May 18
Profile IconMatthew Carter and Nikita joined splunkninja
May 17

splunk-search.exe process


Can someone tell me what the splunk-search.exe process is doing on a client that is configured for SplunkLightForwarder?

I'm noticing that it starts up roughly every 30 seconds, and runs for for about 2-5 seconds using 80-95% of the cpu during that time.

is splunk-search.exe needed when running a SplunkLightForwarder? If it can't be disabled, can is it possible to throttle it back?

thanks,  

Views: 22

▶ Reply to This

Replies to This Discussion

Permalink Reply by Michael Wilde on March 24, 2010 at 12:39pm
Check to see if that forwarder has any scheduled searches running and disable them. Some apps have scheduled searches in them.
Permalink Reply by Atul Mistry on March 25, 2010 at 5:07am
no saved searches, but I was able to resolve the issue by re-enabling the SplunkLightForwarder.

thanks,
Permalink Reply by Michael Wilde on March 25, 2010 at 5:12am
Weird. Splunkd.log might contain some evidence of what was going on.

RSS

© 2012   Created by Michael Wilde.

Badges  |  Report an Issue  |  Terms of Service