https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191361#M55105 <P>Looks like this is <A href="http://docs.splunk.com/Documentation/Splunk/6.1.3/ReleaseNotes/6.1.3#Search_issues">fixed in 6.1.3</A> (SPL-82288)(SPL-84457)</P> Wed, 27 Aug 2014 14:46:27 GMT slierninja 2014-08-27T14:46:27Z https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191359#M55103 <P>ERROR ProcessDispatchedSearch - PROCESS_SEARCH "XXX": The process cannot access the file because it is being used by another process.</P> <P>we are getting these messages over and over 100's of times in the splunkd logs. We tried to clean out the dispatch directory and that has not had an impact. We just upgraded from Splunk version 5.0.3 to version 6.0.2. </P> Mon, 17 Mar 2014 19:16:16 GMT https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191359#M55103 mookiie2005 2014-03-17T19:16:16Z https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191360#M55104 <P>I opened a splunk case for this issue. I was told that SPL-82288 version 6.0.6 will have a fix for this issue.</P> <P>here is a temporary work around:</P> <P>As a workaround, I suggest turning the log level of ProcessDispatchedSearch to CRITICAL or FATAL so that these "ERROR" level messages aren't displayed. <BR /> Note that the most serious problem here is just that splunkd.log gets polluted by all these messages which are supposed to be targeted to local search.log files. Basically, the search process is trying to open it's local <DISPATCH_DIR>/search.log, fails doing so, and therefore logs a message that is re-directed to splunkd because the local logging is not setup. We should just more or less ignore those re-directed messages. </DISPATCH_DIR></P> Mon, 14 Jul 2014 18:55:19 GMT https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191360#M55104 mookiie2005 2014-07-14T18:55:19Z https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191361#M55105 <P>Looks like this is <A href="http://docs.splunk.com/Documentation/Splunk/6.1.3/ReleaseNotes/6.1.3#Search_issues">fixed in 6.1.3</A> (SPL-82288)(SPL-84457)</P> Wed, 27 Aug 2014 14:46:27 GMT https://community.splunk.com/t5/Splunk-Search/Error-ProcessDispatchedSearch-PROCESS-SEARCH-spamming-splund/m-p/191361#M55105 slierninja 2014-08-27T14:46:27Z