Dashboards & Visualizations

After creating a dashboard having 6 panels, all the jobs are getting queued. Also the search lag health status is yellow

cadrija
Path Finder

After creating a dashboard having 6 panels, all the jobs are getting queued.

Also the search lag health status is yellow.

 Search Lag

  • Root Cause(s):
    • The percentage of non high priority searches lagged (50%) over the last 24 hours is very high and exceeded the yellow thresholds (40%) on this Splunk instance. Total Searches that were part of this percentage=2. Total lagged Searches=1

      Please help me to resolve these issues.

Labels (2)
0 Karma
1 Solution

Gr0und_Z3r0
Contributor

Did you try optimizing the queries or build the dashboard with base searches? 

View solution in original post

Gr0und_Z3r0
Contributor

Did you try optimizing the queries or build the dashboard with base searches? 

cadrija
Path Finder

Thanks!
I changed the earliest & latest times from rt to 30m & now.

And it's working fine now.

0 Karma
Get Updates on the Splunk Community!

Harnessing Splunk’s Federated Search for Amazon S3

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated ...

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...