Monitoring Splunk

Are the DMC Critical System Physical Memory Usage alerts inherently slow?

ddrillic
Ultra Champion

We see the following -

alt text

The elapsed time for each one of them is high. Is it the expected behavior?

Tags (1)
0 Karma

davpx
Communicator

This doesn't mean the alerts are slow it means this is the amount of time the alerts have been activated due to high memory usage, so in this case, 30 - 50 seconds of high memory usage per search head.

0 Karma

ddrillic
Ultra Champion

I thought that elapsed time is the time it took the search to run. Isn't it?

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...