Disctributed system - one SH + one indexer:
During a regular search:
09-07-2018 11:24:50.109 INFO PipelineComponent - Process delayed by 105.740 seconds, perhaps system was suspended?
what does this mean?
It seems not enough resource to process your search. Go to settings -> Monitoring console -> Health check -> Click on Start. After run the health check, Splunk will show you if you need to increase the resources (Mem, CPU, Disk) etc.
I went through the search log, there is no "Error" msg, all "Info" tag.
I have an open support ticket on this matter. So far , no explanation.