Dashboards & Visualizations

After creating a dashboard having 6 panels, all the jobs are getting queued. Also the search lag health status is yellow

cadrija
Path Finder

After creating a dashboard having 6 panels, all the jobs are getting queued.

Also the search lag health status is yellow.

 Search Lag

  • Root Cause(s):
    • The percentage of non high priority searches lagged (50%) over the last 24 hours is very high and exceeded the yellow thresholds (40%) on this Splunk instance. Total Searches that were part of this percentage=2. Total lagged Searches=1

      Please help me to resolve these issues.

Labels (2)
0 Karma
1 Solution

Gr0und_Z3r0
Contributor

Did you try optimizing the queries or build the dashboard with base searches? 

View solution in original post

Gr0und_Z3r0
Contributor

Did you try optimizing the queries or build the dashboard with base searches? 

cadrija
Path Finder

Thanks!
I changed the earliest & latest times from rt to 30m & now.

And it's working fine now.

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...