https://community.splunk.com/t5/Splunk-Enterprise-Security/Jobs-with-warning-message-Splunk-ES/m-p/520758#M9294 <P>They are all scheduled real time which means they might be running.</P> Tue, 22 Sep 2020 08:50:53 GMT thambisetty 2020-09-22T08:50:53Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Jobs-with-warning-message-Splunk-ES/m-p/520679#M9290 <P>This warning message indicates that even though it has errors, it is still running or is definitely not working?</P><P><EM>Asynchronous bundle replication might cause (pre 4.2) search peers to run searches with different bundle/config versions. Results might not be correct.</EM></P><P><EM>[subsearch]: Subsearches of a real-time search run over all-time unless explicit time bounds are specified within the subsearch.</EM></P><P><EM>[subsearch]: Successfully read lookup file '/splunk/etc/apps/SA-Utils/lookups/qualitative_thresholds.csv'.</EM></P><P><EM>remote search process failed on peer</EM></P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkcol_0-1600714863215.png" style="width: 794px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/10917i7940748102221D25/image-dimensions/794x298?v=v2" width="794" height="298" role="button" title="splunkcol_0-1600714863215.png" alt="splunkcol_0-1600714863215.png" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">splunkcol_0-1600714863215.png</span></span></P><P>&nbsp;</P> Mon, 21 Sep 2020 19:08:48 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Jobs-with-warning-message-Splunk-ES/m-p/520679#M9290 splunkcol 2020-09-21T19:08:48Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Jobs-with-warning-message-Splunk-ES/m-p/520758#M9294 <P>They are all scheduled real time which means they might be running.</P> Tue, 22 Sep 2020 08:50:53 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Jobs-with-warning-message-Splunk-ES/m-p/520758#M9294 thambisetty 2020-09-22T08:50:53Z