The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Previous Topic: Your Splunk license expired or you have exceeded your license limit too many times | Next Topic: Unattended install/configuration
Posts 1–2 of 2
I was wondering if anyone had any information on the performance of a Light Forwarder.
I found some information here http://www.splunk.com/base/Deploy:ForwarderBestPractice, which says that on a 2GHz core, with pre-processing turned on, a Forwarder can handle between 2-3MB of data per second. Does anyone have an idea what the figure would be when pre-processing is disabled?
Thanks
It depends on the characteristics of the data on the forwarder. That said, in most cases it wouldn't be prudent to forward more than 2-3 MB of data per second from any one forwarder.