Splunk Enterprise

How to best debug splunk scheduler issues for Splunk support?

rphillips_splk
Splunk Employee
Splunk Employee

A scheduler issue may be described as:
- reduced number of completed scheduled searches running during certain periods
- scheduler locks up and doesn’t run any scheduled searches for a period of time
- high number of skipped/deferred scheduled searches


How can I provide Splunk Support the right diagnostics to solve my problem and determine root cause? 

Labels (2)
Tags (1)
0 Karma
1 Solution

rphillips_splk
Splunk Employee
Splunk Employee

see DatacollectionfordebuggingSplunkschedulerissues.pdf attached 

View solution in original post

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

see DatacollectionfordebuggingSplunkschedulerissues.pdf attached 

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...