Monitoring Splunk

Are the DMC Critical System Physical Memory Usage alerts inherently slow?

ddrillic
Ultra Champion

We see the following -

alt text

The elapsed time for each one of them is high. Is it the expected behavior?

Tags (1)
0 Karma

davpx
Communicator

This doesn't mean the alerts are slow it means this is the amount of time the alerts have been activated due to high memory usage, so in this case, 30 - 50 seconds of high memory usage per search head.

0 Karma

ddrillic
Ultra Champion

I thought that elapsed time is the time it took the search to run. Isn't it?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...