searches skipped in the last 24hours. 500 internal server error. insufficient permission to access this resource

[mfonisso]

when i try running a search on my Splunk enterprise in the search and reporting app i get the "insufficient permission to access this resource" message.  i tried to click on  the things under settings and i get the "500 internal server error" message and there's this severe warning message in my search scheduler that says "searches skipped in the last 24 hours"
how do i troubleshoot these and get my splunk enterprise running normally again?

[mfonisso · Accepted solution]

I've been able to resolve the issues. I made some changes to the configuration files and everything is working perfectly ok now

[gcusello]

Hi @mfonisso,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

[gcusello]

Hi @mfonisso,

what are the resources of your Splunk server?

Splunk requires at least 12 CPUs and 12 GB RAM (more if you have ES or ITSI) and a disk with at least 800 IOPS.

Ciao.

Giuseppe

[mfonisso]

how do I check my resources, please? although up until 2 days ago my Splunk has been operating well