Splunk® Enterprise

Workload Management

Download manual as PDF

Download topic as PDF


Workload management has the following requirements and limitations.

Splunk Enterprise version requirements

Workload management requires Splunk Enterprise version 7.2.0 or later.

The following workload management features require the specified Splunk Enterprise version:

  • Automated Linux preflight checks for workload management require version 7.2.2. or later.
  • Workload pool categories (search, ingest, and misc) for workload management requires version 7.3.0 or later.
  • Workload rules for workload pool monitoring and actions requires version 8.0.0 or later.

Operating system requirements

Workload management is currently supported in Splunk Enterprise on Linux operating systems only.

For more information, see Supported operating systems.

Linux operating system requirements

Linux kernel

Workload management requires Linux kernel version 2.6.25 or later. For information on currently supported and deprecated Linux kernel versions for Splunk Enterprise, see Supported operating systems in the Installation Manual.

Cgroups version

Workload management requires cgroups version 1.0.

Systemd version

Workload management supports systemd version 219 or later.

Systemd is not a mandatory requirement, but if it is running on your Linux instance, it must be version 219 or later.

Supported Linux distributions

Splunk Enterprise supports workload management on these Linux distributions:

  • RHEL 6 and 7
  • CentOS 6 and 7
  • Ubuntu 10.04 LTS and later
  • SUSE 11 and 12

Configure cgroups for splunkd

Before you can configure and enable workload management in Splunk Enterprise, you must set up the underlying Linux operating system to allow splunkd to manage cgroups. See Set up Linux for workload management.

How workload management works
Set up Linux for workload management

This documentation applies to the following versions of Splunk® Enterprise: 7.3.0, 7.3.1, 7.3.2

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters