Splunk® Enterprise

Workload Management

Download manual as PDF

Download topic as PDF

About workload management

Workload management is a rule-based framework that lets you allocate compute and memory resources to search, indexing, and other workloads in Splunk Enterprise.

Workload management lets you create system resource pools, called workload pools, and allocate search workloads to different pools. You can also monitor long-running searches and perform automated remediation actions.

Workload management lets you:

  • Assign resources to critical search workloads.
  • Avoid data-ingestion latency due to heavy search load.
  • Limit resource allocation to low-priority search workloads, such as real-time searches.
  • Monitor searches and apply automated remediation, such as aborting a search or throttling resources.

To learn more about workload management, see How workload management works.

For Linux configuration prerequisites, see Set up Linux for workload management.

For workload management configuration instructions, see Configure workload pools.

To learn about automated search placement and monitoring rules, see Configure workload rules.

For instructions on how to deploy workload management in a distributed environment, see Configure workload management on a distributed deployment.

Last modified on 17 October, 2020
  NEXT
How workload management works

This documentation applies to the following versions of Splunk® Enterprise: 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.1.0


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters