https://community.splunk.com/t5/All-Apps-and-Add-ons/System-Tagger-for-McAfee-ePO-s-jobs-are-incomplete-due-to/m-p/341664#M41237 <P>Hi Splunkers,</P> <P>we try to integrate System Tagger for McAfee ePO to apply tags in ePO DB. <BR /> But the result is always incomplete - f.e. lt only 17 records were tagged from 300 required.<BR /> It seems that the root cause was found in a scheduler.log "</P> <BLOCKQUOTE> <P>Reached maximum amount of time allowed to spend in per-result alerts... max_alerts_time=300 (seconds), fired_alerts=17</P> </BLOCKQUOTE> <P>So I have 2 questions:</P> <OL> <LI>Is it normal that only 15-20 records may be tagged during 5 minutes? </LI> <LI>How to increase the <EM>maximum amount of time allowed to spend in per-result alerts</EM>?</LI> </OL> Tue, 29 Sep 2020 17:15:29 GMT evelenke 2020-09-29T17:15:29Z https://community.splunk.com/t5/All-Apps-and-Add-ons/System-Tagger-for-McAfee-ePO-s-jobs-are-incomplete-due-to/m-p/341664#M41237 <P>Hi Splunkers,</P> <P>we try to integrate System Tagger for McAfee ePO to apply tags in ePO DB. <BR /> But the result is always incomplete - f.e. lt only 17 records were tagged from 300 required.<BR /> It seems that the root cause was found in a scheduler.log "</P> <BLOCKQUOTE> <P>Reached maximum amount of time allowed to spend in per-result alerts... max_alerts_time=300 (seconds), fired_alerts=17</P> </BLOCKQUOTE> <P>So I have 2 questions:</P> <OL> <LI>Is it normal that only 15-20 records may be tagged during 5 minutes? </LI> <LI>How to increase the <EM>maximum amount of time allowed to spend in per-result alerts</EM>?</LI> </OL> Tue, 29 Sep 2020 17:15:29 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/System-Tagger-for-McAfee-ePO-s-jobs-are-incomplete-due-to/m-p/341664#M41237 evelenke 2020-09-29T17:15:29Z https://community.splunk.com/t5/All-Apps-and-Add-ons/System-Tagger-for-McAfee-ePO-s-jobs-are-incomplete-due-to/m-p/341665#M41238 <P>Resolved with adding to system/local/limits.conf:</P> <P>[scheduler]<BR /> max_per_result_alerts_time = 0</P> Tue, 29 Sep 2020 17:36:57 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/System-Tagger-for-McAfee-ePO-s-jobs-are-incomplete-due-to/m-p/341665#M41238 evelenke 2020-09-29T17:36:57Z