topic What is scheduler status=continued? in Getting Data In

What is scheduler status=continued?

the_wolverine — Fri, 13 Jun 2014 00:03:28 GMT

In the scheduler logging, I see status=continued. What exactly does that mean?

Re: What is scheduler status=continued?

emechler_splunk — Fri, 13 Jun 2014 06:40:39 GMT

Quoting from http://docs.splunk.com/Documentation/Splunk/6.1.1/Report/Configurethepriorityofscheduledreports:

Continuous scheduling is used for situations where problems arise when there's any gap in
the collection of report data. In general this is only important for reports that populate
summary indexes, though you may find other uses for it. When a report is enabled for
summary indexing, Splunk Enterprise changes its scheduling option to continuous
automatically.

When you see a "status=continued" event it refers to the case where a continuous search that was supposed to run at a given time wasn't and the system will come back to it later.

Re: What is scheduler status=continued?

ben_leung — Mon, 25 Jul 2016 22:56:39 GMT

So should we expect in the scheduler log that there will be a status completed for the specified scheduled time?

Re: What is scheduler status=continued?

nishitdarade — Thu, 04 Aug 2016 17:52:50 GMT

Yes there will be a status completed.