Getting Data In

How to fix blocked queues?

dheeraj_t
New Member

getting below error -

/opt/splunk/var/log/splunk # grep -i "blocked=true" metrics.log
10-03-2019 07:54:33.943 +0000 INFO Metrics - group=queue, name=aggqueue, blocked=true, max_size_kb=30720, current_size_kb=30719, current_size=86431, largest_size=86928, smallest_size=84513

Server logs -

root@:/opt/splunk/var/log/splunk # grep -i "parsingQueue" splunkd.log.5 |more
09-24-2019 04:35:36.417 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying...
09-24-2019 04:36:06.275 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying...

Matrix logs -

root@:/opt/splunk/var/log/splunk # grep -i "blocked=true" metrics.log
10-01-2019 09:06:25.809 +0000 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=378, largest_size=598, smallest_size=4
10-01-2019 09:06:57.784 +0000 INFO Metrics - group=queue, name=splunktcpin, blocked=true, max_size_kb=500, current_size_kb=499, current_size=423, largest_size=642, smallest_size=0

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...