I have 34 realtime searches on a dashboard, whenever i open that dashboard on another user i get the error :
"Dispatch Command: Unknown error for indexer: Yggdrasil. Search Results might be incomplete! If this occurs frequently, please check on the peer."
If 2 user open that same dashboard ill have 68 realtime searches.
What could be the cause of this error and the solution?
I tried changing the maxrtsearch_multiplier but still the error exist.
How many CPU cores do you have on your searchhead and indexers? This message is often appearing with "bad" written searches.
Consider alternatives for real-time searches, in 99% of the cases they're really not necessary.
Here are 3 alternatives for the real-time searches:
Auto-refresh dashboard or panels