Dashboards & Visualizations

After creating a dashboard having 6 panels, all the jobs are getting queued. Also the search lag health status is yellow

cadrija
Path Finder

After creating a dashboard having 6 panels, all the jobs are getting queued.

Also the search lag health status is yellow.

 Search Lag

  • Root Cause(s):
    • The percentage of non high priority searches lagged (50%) over the last 24 hours is very high and exceeded the yellow thresholds (40%) on this Splunk instance. Total Searches that were part of this percentage=2. Total lagged Searches=1

      Please help me to resolve these issues.

Labels (2)
0 Karma
1 Solution

Gr0und_Z3r0
Contributor

Did you try optimizing the queries or build the dashboard with base searches? 

View solution in original post

Gr0und_Z3r0
Contributor

Did you try optimizing the queries or build the dashboard with base searches? 

cadrija
Path Finder

Thanks!
I changed the earliest & latest times from rt to 30m & now.

And it's working fine now.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...