topic Re: async saved search fetch setting on limits.conf in Splunk Enterprise

Why does async saved search fetch setting on limits.conf?

WildHuckleberry — Sun, 27 Nov 2022 15:58:39 GMT

Hello Splunkers!

Does anyone know about async_saved_search_fetch setting?

Splunk Documentation says, do not change the setting but want to know what this is.

async_saved_search_fetch = <boolean>

Enables a separate thread that will fetch scheduled or auto-summarized saved

searches asynchronously.

Do not change this setting unless instructed to do so by Splunk support.
Default: true

How should I fix this issue?

Thank you for your work will be provided.

Re: async saved search fetch setting on limits.conf

richgalloway — Thu, 24 Nov 2022 01:08:19 GMT

Where do you see the "async_saved_search_fetch = <boolean>" alert? In what context?

Re: async saved search fetch setting on limits.conf

WildHuckleberry — Thu, 24 Nov 2022 01:27:54 GMT

I apologize it was misunderstanding on communication with my co-worker who want me to ask the question.
The question has been changed and there is no alert messege.
We just want to explain when and how to use async saved search fetch setting.

Thanks.

Re: async saved search fetch setting on limits.conf

richgalloway — Thu, 24 Nov 2022 14:20:37 GMT

As the docs say, do NOT change that setting unless Support tells you to.

Re: async saved search fetch setting on limits.conf

WildHuckleberry — Fri, 25 Nov 2022 14:21:34 GMT

Could you explain why we shouldn’t change the setting??

Re: async saved search fetch setting on limits.conf

richgalloway — Sat, 26 Nov 2022 01:21:17 GMT

Any time the docs say "don't change this unless Support says so", it means bad things can happen if you change this setting without knowing what you are doing.