Installation
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

Why am I seeing a higher skipped/deferred in my search head cluster after upgrading to 9.x ?

rphillips_splk
Splunk Employee
Splunk Employee
‎09-15-2023 01:30 PM

I recently upgraded my search head cluster to 9.x and since then my skipped/deferred searches have sky rocketed.

 

 

index=_internal source=*scheduler.log  
status=* | timechart span=60s count by status

 

 

 

Labels (1)
Labels
Tags (2)
0 Karma
Reply

rphillips_splk
Splunk Employee
Splunk Employee
‎09-15-2023 02:42 PM

Please see this knowledge article for details on the known issue and fix/workaround:
https://splunk.my.site.com/customer/s/article/High-Skipped-Search-Ratio-after-upgrading-to-9-x

0 Karma
Reply
Register for .conf25!
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...