Workload management has the following requirements and limitations.
Splunk Enterprise version requirements
Workload management requires Splunk Enterprise version 7.2.0 or later.
The following workload management features require the specified Splunk Enterprise version:
- Automated Linux preflight checks for workload management require version 7.2.2. or later.
- Workload pool categories (search, ingest, and misc) for workload management requires version 7.3.0 or later.
- Workload rules for workload pool monitoring and actions requires version 8.0.0 or later.
Operating system requirements
Workload management is currently supported in Splunk Enterprise on Linux operating systems only.
For more information, see Supported operating systems.
Linux operating system requirements
Workload management requires Linux kernel version 2.6.25 or later. For information on currently supported and deprecated Linux kernel versions for Splunk Enterprise, see Supported operating systems in the Installation Manual.
Workload management requires cgroups version 1.0.
Workload management supports systemd version 219 or later.
Systemd is not a mandatory requirement, but if it is running on your Linux instance, it must be version 219 or later.
Supported Linux distributions
Splunk Enterprise supports workload management on these Linux distributions:
- RHEL 6 and 7
- CentOS 6 and 7
- Ubuntu 10.04 LTS and later
- SUSE 11 and 12
Configure cgroups for splunkd
Before you can configure and enable workload management in Splunk Enterprise, you must set up the underlying Linux operating system to allow splunkd to manage cgroups. See Set up Linux for workload management.
How workload management works
Set up Linux for workload management
This documentation applies to the following versions of Splunk® Enterprise: 7.3.0, 7.3.1, 7.3.2