DispatchManager: This component has highest number of events and has no events before up- gradataion
06-18-2020 12:59:41.537 +0100 WARN DispatchManager - enforceQuotas: username="apasha", search_id="apasha__apasha_ZWVfc2VhcmNoX3BjcmY__search3_1592481563.5052_644D578C-F001-4711-B459-2338E22DF399" - QUEUED reason="The maximum number of concurrent historical searches for this user based on their role quota has been reached.", concurrency_limit="2"
The above log looks like an Ad-hoc search and it says, QUEUED. what would be the reason? any help is highly appreciated... Thanks. see below logs too....
I don't think that it's possible to solve this problem without accessing the system and analyzing logs and configurations, so My hint is to open a Ticket to Splunk Support so they can access the systems and quicky solve the problem.
Opening the ticket send them the diags of all the SHC members and Deployer.