KV store issue for collection SavedSearchHistory

[lqiao]

From time to time, I am getting below warning:

WARN SavedSearchHistory - Can't persist saved-search history due to the KV-Store either being disabled or failing

It doesn't appear all the time, just randomly. What does this message mean? How to fix this? We have KV-Store enabled. Thanks.

[nunoaragao]

Old thread, but leaving it here in hope other people might chip in. 

Also seen the same WARNs, at a time we suffered from KV Store consuming a whole lot of CPU and wiredTigerCacheSizeGB, over 15 times the sum of any collection. Opening a Splunk Support case we were told:

Splunk does not use KV Store to manage or store the history of scheduled searches. Scheduled searches are managed and tracked via internal logs, dispatch directories, and internal indexes, not KV Store

---

However, we occasionally see those events on Search Heads, and frequently on Heavy Forwarders on role of parsing and routing, not connected to License Manager and disabled KV Store.