topic Re: What does Splunk search log "Process delayed... perhaps system was suspended" mean? in Monitoring Splunk

What does Splunk search log "Process delayed... perhaps system was suspended" mean?

xindeNokia — Fri, 07 Sep 2018 15:34:27 GMT

Disctributed system - one SH + one indexer:
During a regular search:

09-07-2018 11:24:50.109 INFO PipelineComponent - Process delayed by 105.740 seconds, perhaps system was suspended?

what does this mean?

Re: What does Splunk search log "Process delayed... perhaps system was suspended" mean?

xindeNokia — Fri, 07 Sep 2018 15:43:12 GMT

I went through the search log, there is no "Error" msg, all "Info" tag.

Re: What does Splunk search log "Process delayed... perhaps system was suspended" mean?

laurent_ — Mon, 05 Nov 2018 09:09:19 GMT

Hello,

I have an open support ticket on this matter. So far , no explanation.

Re: What does Splunk search log "Process delayed... perhaps system was suspended" mean?

wagnerlucena — Mon, 05 Nov 2018 14:27:42 GMT

It seems not enough resource to process your search. Go to settings -> Monitoring console -> Health check -> Click on Start. After run the health check, Splunk will show you if you need to increase the resources (Mem, CPU, Disk) etc.

Re: What does Splunk search log "Process delayed... perhaps system was suspended" mean?

splunk_zen — Thu, 11 Apr 2019 09:40:36 GMT

Same here.