When should multiple search pipelines be enabled?
When should multiple search pipelines be enabled?
Multiple search pipelines should be enabled only if CPU and memory resources are significantly under-utilized. This is because enabling multiple search pipelines can significantly increase the demand on the system's resources. If the CPU and memory are already being heavily utilized, adding more pipelines can degrade overall system performance. Therefore, ensuring that these resources are under-utilized is crucial before enabling multiple search pipelines to maintain optimal performance.
D - Page 140 Architecting Splunk
D - https://docs.splunk.com/Documentation/Splunk/8.2.6/Indexer/Pipelinesets
https://docs.splunk.com/Documentation/Splunk/7.0.2/Indexer/Pipelinesets
Ans D -You can set multiple search pipelines if you have unused CPU/memory resources
Answer D - https://docs.splunk.com/Documentation/Splunk/9.1.0/Capacity/Parallelization