Monitoring Splunk

What does this undocumented error message in _internal mean?

gesa_behrens
Path Finder

Since our last update to 8.2.2.1 the index _internal contains lots of ERROR messages where we cannot get any information about it's meaning:

ERROR ILightWeightSearchStringParser [4392 SchedulerThread] - still in inQueto=true

Does anybody know this message and can give some information about it?

 

Thanks

Labels (2)

ursfischer
Engager

Hi there, we have almost the same here in our Platform: "ERROR ILightWeightSearchStringParser [18851 TcpChannelThread] - still in inQueto=true". Any Ideas what this can be?

0 Karma

pablobarquin
Explorer

We have the same situation with version 8.2.8

Any idea about the root cause?

Thanks!

0 Karma
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...