报错分析 | Splunk 因“max_rawsize_perchunk”配置问题导致搜索内存不足
报错信息Events may not be returned in sub-second order due to search memory limits configured in limits.conf :max_rawsize_perchunk. See search.log for more information.处理办法1. 打开Splunk安装目录2. 根据「etc\system\default」路径信息,找到「limits.conf」文件。3. 修改「max_raw
原创
2021-08-20 13:19:11 ·
326 阅读 ·
0 评论