Splunk ITSI

Refresh queue at 33635, entities/ services not working or updating

Dpeedahnb
Explorer

I work for a company with a clustered environment of around 9 indexers and 3 search heads, with a cluster master and deployment server + deployer.

Recently none of our services or entities work together, well, the new ones don’t, all services created prior to the 26th Nov still work with their entities.

Our entity list does not update with its linked service when an entity is linked. A duplicate of a service that is working, will not work either.

We realised it was an issue with our refresh queue, mainly on entity_service jobs, what is the best way forward, to delete the queue? We would like to know what the issue is but for now all we have to go on is that the refresh queue has been increasing since 26th Nov. 
Are we advised to refresh / delete the queue? Is this advised if the root of the problem is still unknown

I have been trying to look and find what is causing this issue but to no avail.

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Customer Experience | Splunk 2024: New Onboarding Resources

In 2023, we were routinely reminded that the digital world is ever-evolving and susceptible to new ...

Celebrate CX Day with Splunk: Take our interactive quiz, join our LinkedIn Live ...

Today and every day, Splunk celebrates the importance of customer experience throughout our product, ...

How to Get Started with Splunk Data Management Pipeline Builders (Edge Processor & ...

If you want to gain full control over your growing data volumes, check out Splunk’s Data Management pipeline ...