Archive

What does Splunk search log "Process delayed... perhaps system was suspended" mean?

Path Finder

Disctributed system - one SH + one indexer:
During a regular search:

09-07-2018 11:24:50.109 INFO PipelineComponent - Process delayed by 105.740 seconds, perhaps system was suspended?

what does this mean?

Explorer

It seems not enough resource to process your search. Go to settings -> Monitoring console -> Health check -> Click on Start. After run the health check, Splunk will show you if you need to increase the resources (Mem, CPU, Disk) etc.

0 Karma

Path Finder

I went through the search log, there is no "Error" msg, all "Info" tag.

0 Karma

Explorer

Hello,

I have an open support ticket on this matter. So far , no explanation.

Builder

Same here.

0 Karma