- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
cadrija
Path Finder
12-02-2021
04:21 AM
After creating a dashboard having 6 panels, all the jobs are getting queued.
Also the search lag health status is yellow.
Search Lag
- Root Cause(s):
- The percentage of non high priority searches lagged (50%) over the last 24 hours is very high and exceeded the yellow thresholds (40%) on this Splunk instance. Total Searches that were part of this percentage=2. Total lagged Searches=1
Please help me to resolve these issues.
- The percentage of non high priority searches lagged (50%) over the last 24 hours is very high and exceeded the yellow thresholds (40%) on this Splunk instance. Total Searches that were part of this percentage=2. Total lagged Searches=1
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Gr0und_Z3r0
Contributor
12-02-2021
04:34 AM
Did you try optimizing the queries or build the dashboard with base searches?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Gr0und_Z3r0
Contributor
12-02-2021
04:34 AM
Did you try optimizing the queries or build the dashboard with base searches?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
cadrija
Path Finder
12-02-2021
04:44 AM
Thanks!
I changed the earliest & latest times from rt to 30m & now.
And it's working fine now.
