Latency in Splunk index

JuhiSaxena · ‎08-16-2018

I am seeing lag in one of the index of around 1600ms and couldn't see any WARN or ERROR in _internal logs. What could be the issue?

the data is like:

08-16-2018|04:14:56.784[TE_ERROR][pa_obtainScenarioPriceMap][SSVIntegration.cpp:629][pid-51525][tid--1016973568][prodpmcf626]Received a message with no shocked prices for YY

skoelpin · ‎08-16-2018

How did you confirm the 1.6 second indexing lag? Have you looked in the DMC for pipeline issues? Are you experiencing lag across all forwarders or just one?

Latency in Splunk index

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

Latency in Splunk index

Thanks for the Memories! Splunk University, .conf25, and our Community

Data Persistence in the OpenTelemetry Collector

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever