Monitoring Splunk

Latency in Splunk index

JuhiSaxena
Explorer

I am seeing lag in one of the index of around 1600ms and couldn't see any WARN or ERROR in _internal logs. What could be the issue?

the data is like:

08-16-2018|04:14:56.784[TE_ERROR][pa_obtainScenarioPriceMap][SSVIntegration.cpp:629][pid-51525][tid--1016973568][prodpmcf626]Received a message with no shocked prices for YY

Tags (3)
0 Karma

skoelpin
SplunkTrust
SplunkTrust

How did you confirm the 1.6 second indexing lag? Have you looked in the DMC for pipeline issues? Are you experiencing lag across all forwarders or just one?

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...