https://community.splunk.com/t5/Getting-Data-In/Splunk-Health-Warning-on-Search-Head/m-p/571144#M101183 <P>Hello,</P><P>We are using Splunk cloud and seeing the below error message on SH.</P><H3><SPAN>&nbsp;</SPAN><SPAN>Search Scheduler Search Lag</SPAN></H3><UL><LI><STRONG>Root Cause(s):</STRONG><UL><LI><SPAN>The number of extremely lagged searches (4) over the last hour exceeded the red threshold (1) on this Splunk instance</SPAN></LI></UL></LI></UL><P>&nbsp;</P><P><SPAN>Can someone please help me in fixing this issue?</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P><SPAN>Thanks</SPAN></P> Fri, 15 Oct 2021 16:22:13 GMT Roy_9 2021-10-15T16:22:13Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Health-Warning-on-Search-Head/m-p/571144#M101183 <P>Hello,</P><P>We are using Splunk cloud and seeing the below error message on SH.</P><H3><SPAN>&nbsp;</SPAN><SPAN>Search Scheduler Search Lag</SPAN></H3><UL><LI><STRONG>Root Cause(s):</STRONG><UL><LI><SPAN>The number of extremely lagged searches (4) over the last hour exceeded the red threshold (1) on this Splunk instance</SPAN></LI></UL></LI></UL><P>&nbsp;</P><P><SPAN>Can someone please help me in fixing this issue?</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P><SPAN>Thanks</SPAN></P> Fri, 15 Oct 2021 16:22:13 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Health-Warning-on-Search-Head/m-p/571144#M101183 Roy_9 2021-10-15T16:22:13Z https://community.splunk.com/t5/Getting-Data-In/Splunk-Health-Warning-on-Search-Head/m-p/571157#M101185 <P>Use the Cloud Monitoring Console app to see which searches are lagged.&nbsp; Go to Search-&gt;Scheduler Activity and scroll down to the Execution Latency panel.&nbsp; Group the results by Report Name to find the offending searches.</P><P>Try rescheduling the searches to a time when fewer other searches are running.</P> Fri, 15 Oct 2021 18:32:30 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-Health-Warning-on-Search-Head/m-p/571157#M101185 richgalloway 2021-10-15T18:32:30Z