topic Re: Splunk Server in (windows 2008 r2) is not searching data in Splunk Search https://community.splunk.com/t5/Splunk-Search/Splunk-Server-in-windows-2008-r2-is-not-searching-data/m-p/68295#M180496 <P>I would install the Splunk On Splunk app <A href="http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk">http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk</A> to find out what queue is congested (<CODE>/en-US/app/sos/indexing_performance</CODE>).</P> <P>As well you could a look at increasing the indexer <CODE>[queue] maxSize</CODE> in <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Serverconf">http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Serverconf</A></P> Mon, 24 Sep 2012 15:44:59 GMT MarioM 2012-09-24T15:44:59Z Splunk Server in (windows 2008 r2) is not searching data https://community.splunk.com/t5/Splunk-Search/Splunk-Server-in-windows-2008-r2-is-not-searching-data/m-p/68294#M180495 <P>Hi,<BR /> Due to some issue the splunk server is not searching any data and getting bellow error. even I am not able to telnet port number 9997 however it is already been added in splunk server.</P> <P>Error:- "skipped indexing of internal audit event will keep dropping events until indexer congestion is remedied"</P> Mon, 24 Sep 2012 14:44:26 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-Server-in-windows-2008-r2-is-not-searching-data/m-p/68294#M180495 sachinkum 2012-09-24T14:44:26Z Re: Splunk Server in (windows 2008 r2) is not searching data https://community.splunk.com/t5/Splunk-Search/Splunk-Server-in-windows-2008-r2-is-not-searching-data/m-p/68295#M180496 <P>I would install the Splunk On Splunk app <A href="http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk">http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk</A> to find out what queue is congested (<CODE>/en-US/app/sos/indexing_performance</CODE>).</P> <P>As well you could a look at increasing the indexer <CODE>[queue] maxSize</CODE> in <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Serverconf">http://docs.splunk.com/Documentation/Splunk/4.3.4/admin/Serverconf</A></P> Mon, 24 Sep 2012 15:44:59 GMT https://community.splunk.com/t5/Splunk-Search/Splunk-Server-in-windows-2008-r2-is-not-searching-data/m-p/68295#M180496 MarioM 2012-09-24T15:44:59Z