When I do a health check I get a warning that the skip ratio for scheduled searches is 96.4%. Upon further digging, and checking Search Activity: Instance it shows a skip ratio of 96.3 %. I have run the search index=_internal source=*scheduler.log | stats count by user, app, savedsearch_name, status
and the results returned was a high number of scheduled searches from the app Cisco Security Suite that were skipped. I changed the [scheduler]max_searches_per cpu
in the limits.conf file to 35. Is there anything else that I can do?
Indexer Server
CPU: 16 Physical 32 Virtual
Memory: 262 GB