Splunk Enterprise

How to best debug splunk scheduler issues for Splunk support?

rphillips_splk
Splunk Employee
Splunk Employee

A scheduler issue may be described as:
- reduced number of completed scheduled searches running during certain periods
- scheduler locks up and doesn’t run any scheduled searches for a period of time
- high number of skipped/deferred scheduled searches


How can I provide Splunk Support the right diagnostics to solve my problem and determine root cause? 

Labels (2)
Tags (1)
0 Karma
1 Solution

rphillips_splk
Splunk Employee
Splunk Employee

see DatacollectionfordebuggingSplunkschedulerissues.pdf attached 

View solution in original post

0 Karma

rphillips_splk
Splunk Employee
Splunk Employee

see DatacollectionfordebuggingSplunkschedulerissues.pdf attached 

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...