Getting Data In

Dispatch Runner: This typically reflects underlying storage performance issues


Hi all.

I would like to know if there is a method to avoid displaying the boring messages,

[INDEXER] Dispatch Runner: Configuration initialization for /opt/splunk/var/run/searchpeers/81F8C272-511D-4FBA-A2EA-F87129051744-1625835689 took longer than expected (3260ms) when dispatching a search (search ID: remote_SH_xxx__xxx__xxx__xxx_1625837471.443922_07316CBA-2692-4C41-B9C4-89500E9141D2); this typically reflects underlying storage performance issues


inside the SearchHead(s) Environment, FROM Indexer(s) Environment.

System is up & running, heavy load, i know, and disks are very sollecitated.
This message is really annoing, i know it's not a blocking-warning (storage is under "stress"), since there are many dashboards with some panels in which the warnings completely break the visual layout.

I tried to search, but seems there's no "solution".

Any idea? I CAN'T upgrade storage and disks!


Labels (1)


If someone else has the same problem, and the same annoying warning icon, it can by bypassed by hiding the corrispective css object,


<html><style>#style, .error-details {display: none !important;}</style></html>


For me, this way, makes the job 👍

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! &#x1f308; In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...