https://community.splunk.com/t5/Getting-Data-In/How-to-fix-blocked-queues/m-p/497518#M84842 <P>getting below error -</P> <P>/opt/splunk/var/log/splunk # grep -i "blocked=true" metrics.log<BR /> 10-03-2019 07:54:33.943 +0000 INFO Metrics - group=queue, name=aggqueue, blocked=true, max_size_kb=30720, current_size_kb=30719, current_size=86431, largest_size=86928, smallest_size=84513</P> <P>Server logs -</P> <P>root@:/opt/splunk/var/log/splunk # grep -i "parsingQueue" splunkd.log.5 |more <BR /> 09-24-2019 04:35:36.417 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying... <BR /> 09-24-2019 04:36:06.275 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying... </P> <P>Matrix logs -</P> <P>root@:/opt/splunk/var/log/splunk # grep -i "blocked=true" metrics.log <BR /> 10-01-2019 09:06:25.809 +0000 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=378, largest_size=598, smallest_size=4 <BR /> 10-01-2019 09:06:57.784 +0000 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=423, largest_size=642, smallest_size=0 </P> Wed, 30 Sep 2020 02:28:16 GMT dheeraj_t 2020-09-30T02:28:16Z https://community.splunk.com/t5/Getting-Data-In/How-to-fix-blocked-queues/m-p/497518#M84842 <P>getting below error -</P> <P>/opt/splunk/var/log/splunk # grep -i "blocked=true" metrics.log<BR /> 10-03-2019 07:54:33.943 +0000 INFO Metrics - group=queue, name=aggqueue, blocked=true, max_size_kb=30720, current_size_kb=30719, current_size=86431, largest_size=86928, smallest_size=84513</P> <P>Server logs -</P> <P>root@:/opt/splunk/var/log/splunk # grep -i "parsingQueue" splunkd.log.5 |more <BR /> 09-24-2019 04:35:36.417 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying... <BR /> 09-24-2019 04:36:06.275 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying... </P> <P>Matrix logs -</P> <P>root@:/opt/splunk/var/log/splunk # grep -i "blocked=true" metrics.log <BR /> 10-01-2019 09:06:25.809 +0000 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=378, largest_size=598, smallest_size=4 <BR /> 10-01-2019 09:06:57.784 +0000 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=423, largest_size=642, smallest_size=0 </P> Wed, 30 Sep 2020 02:28:16 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-fix-blocked-queues/m-p/497518#M84842 dheeraj_t 2020-09-30T02:28:16Z