** EXCEPT FOR SPLUNK ** (or applications which perform I/O on small bits of data) https://docs.splunk.com/Documentation/Splunk/9.0.3/ReleaseNotes/SplunkandTHP

** EXCEPT FOR SPLUNK ** (or applications which perform I/O on small bits of data) https://docs.splunk.com/Documentation/Splunk/9.0.3/ReleaseNotes/SplunkandTHP https://docs.splunk.com/Documentation/Splunk/9.0.3/ReleaseNo... I have notes-to-myself which I can't find at the moment, but the TL:DR is know what you're doing. If you disable it make a note so if the server is re-purposed you don't hamstring an unwitting inheriting admin. I was up against the wall on a Linux indexer which was for mysterious reasons under-performing by a ridiculous percentage, all kinds of crazy latency, until I disabled the THP. This was years ago. If you disable, make it a systemd service so it can be discovered, people don't check /sys/kernel/ as a frequent place to look. Edited: THP not TLB (the translation look-aside buffer).