Splunk Enterprise Security

Splunk jobs not completing- Why are they running at over 100%, some as high as over 150%?

learnyboi1
Observer

Hey everyone!

Has anyone ever experienced jobs running over 100%, sometimes as high as 150%/160% and not completing? It ends up causing the maximum concurrent searches to be reached and makes new jobs not run.

 

We currently have about 220 correlation searches running and this had not been an issue before.

 

Any and all feedback is appreciated!

Labels (1)
0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.


Introducing Unified TDIR with the New Enterprise Security 8.2

Read the blog
Get Updates on the Splunk Community!

Index This | What’s a riddle wrapped in an enigma?

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...