Splunk ITSI

Refresh queue at 33635, entities/ services not working or updating

Dpeedahnb
Explorer

I work for a company with a clustered environment of around 9 indexers and 3 search heads, with a cluster master and deployment server + deployer.

Recently none of our services or entities work together, well, the new ones don’t, all services created prior to the 26th Nov still work with their entities.

Our entity list does not update with its linked service when an entity is linked. A duplicate of a service that is working, will not work either.

We realised it was an issue with our refresh queue, mainly on entity_service jobs, what is the best way forward, to delete the queue? We would like to know what the issue is but for now all we have to go on is that the refresh queue has been increasing since 26th Nov. 
Are we advised to refresh / delete the queue? Is this advised if the root of the problem is still unknown

I have been trying to look and find what is causing this issue but to no avail.

Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...