Thank u for your message. I am also getting red alerts for delayed searches. I searched on answers.splunk.com they all blame the high priority scheduled / saved searches. Your SPL did not find any in my environment. So How do I find the true cause of delayed searches from your point of view ( I know there are many factors incl. (CPU, RAM) etc. Please advise & Thanks again.
As the risk of repeating myself, the cause of delayed searches is having to wait for other searches to complete. Search priorities are, in descending order: real-time, ad-hoc, scheduled, accelerations.