Monitoring Splunk

What does this undocumented error message in _internal mean?

gesa_behrens
Path Finder

Since our last update to 8.2.2.1 the index _internal contains lots of ERROR messages where we cannot get any information about it's meaning:

ERROR ILightWeightSearchStringParser [4392 SchedulerThread] - still in inQueto=true

Does anybody know this message and can give some information about it?

 

Thanks

Labels (2)

ursfischer
Engager

Hi there, we have almost the same here in our Platform: "ERROR ILightWeightSearchStringParser [18851 TcpChannelThread] - still in inQueto=true". Any Ideas what this can be?

0 Karma

pablobarquin
Explorer

We have the same situation with version 8.2.8

Any idea about the root cause?

Thanks!

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...