|
If so, how? What else can I disable or streamline such that my LWF takes up even less local resources? |
4 Answers:
|
If it is windows light forwarder, you can also specifically disable the scripted inputs for wmi and regmon in system/default. This will remove two extra processes, but splunkd is still the heavy. |
|
This was discussed here and some pretty good information as given out: http://answers.splunk.com/questions/10044/reducing-a-light-forwarders-footprint-using-a-config-file |
|
Just a minor improvement, but you can disable (or delete) the sample app. |
