Based on the recommended hardware sizes, you might need to change the configurations of various product components to make optimum use of available resources.
The following table provides a list of the configuration properties, their locations, and the recommended values for the properties for each setup.
Use the following table in conjunction with the recommendations provided in the horizontal sizing recommendations. For example, if you are using a small setup with 16 GB of RAM and eight CPUs, you should change the value of the Indexer's wrapper.java.initmemory
property to 12288 .
In the table, the configuration location paths must be preceded by one of the following environment variables:
Note
When you change any of the following properties, ensure that you re-start the corresponding service for the particular component and any dependent services. For example, the wrapper.java.initmemory
property defines the initial memory required for the Indexer, so when you change this property value, ensure that you re-start the Indexer.
For more information about starting or stopping services and service dependencies, see Starting or stopping product services.
Ensure that you make the same configuration changes for components of the same type. For example, if you change certain configurations for the Indexer, and you have multiple instances of Indexers deployed, ensure that you make the change for all Indexers in your environment.
Product Component | Configuration property and location | Medium setup | Large setup |
---|---|---|---|
Indexer | Initial memory required for the Indexer | ||
Indexer |
| 12288 MB | 12288 MB |
Indexer | \conf\services\indexer.conf | ||
Indexer | Maximum memory required for the Indexer | ||
Indexer |
| 12288 MB | 12288 MB |
Indexer | \conf\services\indexer.conf | ||
Configuration Database | Initial memory required for the Configuration Database | ||
Configuration Database |
| 256 MB | 256 MB |
Configuration Database | \conf\services\configdb.conf | ||
Configuration Database | Maximum memory required for the Configuration Database | ||
Configuration Database | wrapper.java.maxmemory | 512 MB | 512 MB |
Configuration Database | \conf\services\configdb.conf | ||
Console Server + Search | Initial memory required for the Console Server + Search | ||
Console Server + Search | wrapper.java.initmemory | 2048 MB | 2048 MB |
Console Server + Search | \conf\services\server.conf | ||
Console Server + Search | Maximum memory required for the Console Server + Search | ||
Console Server + Search | wrapper.java.maxmemory | 3072 MB | 3072 MB |
Console Server + Search | \conf\services\server.conf | ||
Collection Station | Initial memory required for the Collection Station | ||
Collection Station | wrapper.java.initmemory | 2048 MB | 2048 MB |
Collection Station | \conf\services\collectionstation.conf | ||
Collection Station | Maximum memory required for the Collection Station | ||
Collection Station | wrapper.java.maxmemory | 4096 MB | 4096 MB |
Collection Station | \conf\services\collectionstation.conf | ||
Collection Agent | Maximum number of concurrent collector threads | ||
Collection Agent | collection.thread.pool.size | 160 | 160 |
Collection Agent | \station\collection\custom\conf\agent.properties | ||
Collection Station | Number of hours of data per index for the Collection Station | ||
Collection Station |
| 1 | 1 |
Collection Station | \station\collection\custom\conf\indexstrategies.yml | ||
Console Server + Search | Number of hours of data per index for the Console Server + Search | ||
Console Server + Search |
| 1 | 1 |
Console Server + Search | \custom\conf\server\customIndexstrategies.yml | ||
Console Server + Search | Maximum number of events to fetch in a single search query | ||
Console Server + Search | search.events.fetch.query.limit | 4000 | 2000 |
Console Server + Search | \custom\conf\server\searchserviceCustomConfig.properties | ||
Console Server + Search | Upper cap on the number of search buckets that can be created when events are greater than the search.events.fetch.query.limit value | ||
Console Server + Search | search.events.bucket.max.limit | 150 | 100 |
Console Server + Search | \custom\conf\server\searchserviceCustomConfig.properties | ||
Indexer | Number of shards per index | ||
Indexer | index.number_of_shards |
|
|
Indexer | \conf\indexer\dynamic_template_1.json | ||
Indexer | Indexing request timeout (in milliseconds) | ||
Indexer | indexing.request.timeoutmillis | 30000 | 5000 |
Indexer | \station\collection\custom\conf\agent.properties |
2 Comments
Liz Wiklund-papadopulos
Priyanka Nanwani