https://community.splunk.com/t5/Alerting/How-to-solve-Red-Health-threshold-in-Splunk-Cloud-instances/m-p/626497#M14629 <H3><SPAN>Searches Delayed</SPAN></H3> <UL> <LI><STRONG>Root Cause(s):</STRONG> <UL> <LI><SPAN>The percentage of non high priority searches delayed (22%) over the last 24 hours is very high and exceeded the red thresholds (20%) on this Splunk instance. Total Searches that were part of this percentage=147626. Total delayed Searches=32735</SPAN></LI> </UL> </LI> </UL> <P>How we can permanently solve this issue</P> Wed, 11 Jan 2023 16:10:54 GMT GoliSH 2023-01-11T16:10:54Z https://community.splunk.com/t5/Alerting/How-to-solve-Red-Health-threshold-in-Splunk-Cloud-instances/m-p/626497#M14629 <H3><SPAN>Searches Delayed</SPAN></H3> <UL> <LI><STRONG>Root Cause(s):</STRONG> <UL> <LI><SPAN>The percentage of non high priority searches delayed (22%) over the last 24 hours is very high and exceeded the red thresholds (20%) on this Splunk instance. Total Searches that were part of this percentage=147626. Total delayed Searches=32735</SPAN></LI> </UL> </LI> </UL> <P>How we can permanently solve this issue</P> Wed, 11 Jan 2023 16:10:54 GMT https://community.splunk.com/t5/Alerting/How-to-solve-Red-Health-threshold-in-Splunk-Cloud-instances/m-p/626497#M14629 GoliSH 2023-01-11T16:10:54Z https://community.splunk.com/t5/Alerting/How-to-solve-Red-Health-threshold-in-Splunk-Cloud-instances/m-p/626522#M14630 <P>hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/247559">@GoliSH</a>,</P><P>you should analyze your scheduled searches and change their scheduling to distribute executions.</P><P>Ciao.</P><P>Giuseppe</P> Tue, 10 Jan 2023 07:46:31 GMT https://community.splunk.com/t5/Alerting/How-to-solve-Red-Health-threshold-in-Splunk-Cloud-instances/m-p/626522#M14630 gcusello 2023-01-10T07:46:31Z