A scheduler issue may be described as:
- reduced number of completed scheduled searches running during certain periods
- scheduler locks up and doesn’t run any scheduled searches for a period of time
- high number of skipped/deferred scheduled searches
How can I provide Splunk Support the right diagnostics to solve my problem and determine root cause?
see DatacollectionfordebuggingSplunkschedulerissues.pdf attached