How to change Splunk Health Status - Red?

[alexspunkshell]

Currently, Splunk cloud health is in RED. We are unable to search any query.

Please help me to overcome from this circumstance. I changed the saved searches Alert conditions but even though it is not helping. 

alexspunkshell_0-1652172839197.pngalexspunkshell_1-1652172865702.pngalexspunkshell_2-1652172882320.png

[Roy_9]

@alexspunkshell Hey,

You could change the health status to green by navigating to <yourorgname>.splunkcloud.com/en-US/manager/system/health/manager and edit thresholds.

I guess it will reset by itself if there are any search scheduler issues after 24 hours if we are not changing the thresholds.

Thanks

[Stefanie]

Hi @alexspunkshell ,

Using the Monitoring Console, are you able to see what searches are being skipped? 

The most common reasons for Skipped Searches and  Delayed Searches are usually having too many searches scheduled at the same time.

Here's an article that might assist you better:

https://lantern.splunk.com/Splunk_Platform/Product_Tips/Cloud_Platform/Reducing_skipped_searches_in_Splunk_Cloud_Platform