AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |
Back to Blog
Splunk base webroot9/20/2023 ![]() Click Edit under the specific category.In Splunk Web, click Settings > Workload Management.To edit the resource allocation for a workload category in Splunk Web, do the following: You can edit workload categories using Splunk Web, the CLI, or REST.Įdit workload categories using Splunk Web For example, all search processes run in the search category. The types of processes that run in each category are pre-defined and cannot be changed. Misc: Scripted inputs and modular inputs run in this category.Ingest: Indexing and Splunk core processes run in this category.You can create several pools under the search category. Search: All searches run in this category.The workloads that run in each category are: You can modify the resource allocation for each category. Workload categories are created by default and each workload category has its own default CPU and memory resource allocation. To run preflight checks for workload management using the CLI:įor endpoint details, see workloads/config/preflight-checks in the REST API Reference Manual. After fixing the issues, click Rerun preflight checks.Review the error messages and fix the specified Linux configuration issues. If any preflight check fails, a page appears showing the check results. ![]() If all preflight checks pass, the workload management UI opens, and you can proceed to configure workload management. The Linux preflight checks run automatically. The ExecStart property must include _internal_launch_under_systemd.įor more information on unit file properties, see systemd unit file properties.įor more information on how to set up Linux for workload management, see Set up Linux for workload management. In the unit file, the Restart property must be set to always. The Delegate property in the unit file must be set to true. See Configure Linux systemd for workload management. ![]() The unit file is located under /etc/systemd/system with the name. Memory Splunk base directory rvice requires read and write permissions. Memory Splunk base directory rvice is missing.įor systemd, the base directory is /sys/fs/cgroup/memory/system.slice/.įor non-systemd, the base directory is /sys/fs/cgroup/memory/splunk. See Configure Linux systems not running systemd for workload managment. See Configure Linux systems not running systemd for workload management.ĬPU Splunk base directory rvice requires read and write permissions.įor systemd, permissions must be set for non-root user in the rvice unit file.įor non-systemd, use chown to grant permissions to the Splunk base directory. The base directory name must match the workload_pool_base_dir_name defined in workload_nf The default value is splunk. See Configure Linux systemd for workload management.įor non-systemd, the base directory is /sys/fs/cgroup/cpu/splunk. The must match the Splunk server name in nf. Workload management does not support pre-cgroup or cgroup version 2 Linux kernels.ĬPU Splunk base directory rvice is missing.įor systemd, the base directory is /sys/fs/cgroup/cpu/system.slice/. Workload management is not currently supported on Windows OS.Ĭgroup must be version 1. Workload management runs the following preflight checks: Workload management preflight checks reflect the status of the local instance only. You can run preflight checks manually using the CLI or REST API. If any preflight check fails, review the error messages to identify the Linux configuration issues you must fix before you can configure workload pools. ![]() For information on how to extend this to distributed distributed deployments, see Configure workload management on distributed deployments.įollow these steps to configure workload management on a single instance:Ī set of system checks runs automatically to determine if your underlying Linux operating system is set up properly for creating workload pools. This topic discusses how to configure workload pools on a single instance. For instructions, see Set up Linux for workload management. Before you can configure workload pools in Splunk Enterprise, you must set up Linux cgroups on your underlying Linux operating system.
0 Comments
Read More
Leave a Reply. |