How to solve Red Health threshold in Splunk Cloud instances?

[GoliSH]

Searches Delayed

• Root Cause(s):
  • The percentage of non high priority searches delayed (22%) over the last 24 hours is very high and exceeded the red thresholds (20%) on this Splunk instance. Total Searches that were part of this percentage=147626. Total delayed Searches=32735

How we can permanently solve this issue

[gcusello]

hi @GoliSH,

you should analyze your scheduled searches and change their scheduling to distribute executions.

Ciao.

Giuseppe