Monitoring Splunk

What does Splunk search log "Process delayed... perhaps system was suspended" mean?

xindeNokia
Path Finder

Disctributed system - one SH + one indexer:
During a regular search:

09-07-2018 11:24:50.109 INFO PipelineComponent - Process delayed by 105.740 seconds, perhaps system was suspended?

what does this mean?

wagnerlucena
Explorer

It seems not enough resource to process your search. Go to settings -> Monitoring console -> Health check -> Click on Start. After run the health check, Splunk will show you if you need to increase the resources (Mem, CPU, Disk) etc.

0 Karma

xindeNokia
Path Finder

I went through the search log, there is no "Error" msg, all "Info" tag.

0 Karma

laurent_
Explorer

Hello,

I have an open support ticket on this matter. So far , no explanation.

splunk_zen
Builder

Same here.

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...