Forwarding Issues
Issue:
- Data cloning from a forwarder to two different indexers, there are gaps of data in one of the indexes, both receive the data but one of them maintains a latency.
Root Cause:
- Forwarder’s throughput was limited, so it is not able to send data to both of the indexers with proper cloning
INFO TailReader - File descriptor cache is full (100), trimming
INFO ThruputProcessor - Current data throughput (256 kb/s) has reached
maxKBps. As a result, data forwarding may be throttled. Consider increasing
the value of maxKBps in limits.conf
Solution:
- Increase the maximum speed of forwarder, while configuring data cloning.
Depending on the version, the default is 256. Double it, or use “0” to make it unlimited.