Set capabilities

The capabilities field, previously part of the worker input processes, is now contained in hydra_node.conf (at the node level). The Distributed Collection Scheduler sets the capabilities of the workers on the respective data collection node. You can change the capabilities for a node.

The capabilities in hydra_node.conf can be changed by the data collection node to only include certain tasks. For example, if two data collection nodes are specified in hydra_node.conf, each collecting data of different types, one data collection node can require more power and more memory to process more intensive tasks. This is specified as follows:

[dcn1:8089]
capabilities = hostinv, vminv
[dcn2:8089]
capabilities = task, event

To set up or modify capabilities:

1. Create a local version of hydra_node.conf.
2. Edit $SPLUNK_HOME/etc/apps/local/hydra_node.conf on the scheduler node (usually the search head) to adjust the capabilities.

[default]

gateway_port = 8008

capabilities = *