Monitoring Splunk

Where is the documentation defining the search scheduler.log statuses?

Glasses
Builder

Hi 

I cannot find the documentation that explains the various statuses in the scheduler.log

For example here are a few>>> 

continued
delegated_remote
delegated_remote_completion
delegated_remote_error
skipped
success

 

Does anyone have a reference?

 

Thank you!

Labels (1)

inventsekar
SplunkTrust
SplunkTrust

Hi, All the conf files are documented thoroughly, whereas log files are not(as per my little knowledge). 

on this topic all i remember is:

https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/WhatSplunklogsaboutitself

 

Glasses
Builder

Hopefully Splunk replies with an answer about the status meanings...

0 Karma

gjanders
SplunkTrust
SplunkTrust

There is an idea for metrics.log https://ideas.splunk.com/ideas/EID-I-963 , "Provide the metrics.log groups and their event fields for each release, and document them."

Perhaps you can log an idea for the scheduler log?

Internal logs in general lack documentation unfortunately, I suspect it's not high on Splunk's priority list

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...