topic Re: Only 1 User got "Waiting for queued job to start Manage jobs." in Getting Data In

Only 1 User got "Waiting for queued job to start Manage jobs."

zksvc — Thu, 20 Feb 2025 04:07:24 GMT

Hi Everyone,

In my Splunk environment, I have about 15 users, but the one responsible for creating correlation searches is on 1 account, let's say account 7.

Then I plan to delete the account, before I delete it I create another account with id 13 and move all correlation search/ saved search/ dashboard created by account 7 to account 13 so that the owner will move everything to account 13 and account 7 can be deleted immediately.

Currently, my problem is that when I move to account 13, account 13 will get a notification "Waiting for queued job to start Manage Jobs" which causes me to not be able to search.

Even though account 13 for the role has been equated with account 7, and the role has also been raised for the role search job limit and user search job limit, but strangely it is still queued.

What's even more strange, this 13 account only searches around below 5000 data/day even though other users have more than 5000 data but there are no problems with searching.

Here I attach a picture, in this case account 13 is in 4th place or from the brown chart, account 7 is in 5th place, while the account for analysts is in 1,2,3

Re: Search Head Cluster user get queued

kiran_panchavat — Thu, 13 Feb 2025 03:49:26 GMT

@zksvc

Verify that the new user is replicated across all search heads in the cluster. You can use the splunk show shcluster-status command to check the status of your search head cluster and ensure all members are in sync.

Use the Monitoring Console to view the status of your search head cluster and identify any issues with job execution.

Please check this:

Solved: Why is a Search Head Cluster Member not replicatin... - Splunk Community

Use the monitoring console to view search head cluster status and troubleshoot issues - Splunk Documentation

Solved: Trying to run a search, why are we getting a "Queu... - Splunk Community

limits.conf - Splunk Documentation

Re: Search Head Cluster user get queued

zksvc — Thu, 13 Feb 2025 04:01:59 GMT

Thanks for your reply, since i don't have privilege to see that i will follow up this issue first. if it solved i will give you upvote/karma points.

Danke

Zake

Re: Search Head Cluster user get queued

zksvc — Thu, 20 Feb 2025 04:08:36 GMT

it's not work in my case, do you have another solution ?

Re: Only 1 User got "Waiting for queued job to start Manage jobs."

kiran_panchavat — Thu, 20 Feb 2025 05:09:07 GMT

@zksvcI suggest raising a Splunk support ticket.