This warning message indicates that even though it has errors, it is still running or is definitely not working?
Asynchronous bundle replication might cause (pre 4.2) search peers to run searches with different bundle/config versions. Results might not be correct.
[subsearch]: Subsearches of a real-time search run over all-time unless explicit time bounds are specified within the subsearch.
[subsearch]: Successfully read lookup file '/splunk/etc/apps/SA-Utils/lookups/qualitative_thresholds.csv'.
remote search process failed on peer
