How to do system wide search concurreny (Adhoc + Scheduled)?

[ankithnageshshe]

Hello Splunkers,

I'am trying to understand the concept of Search head concurrency.

I have a SHC with three search head each having 10CPU (splunk 6.4 running)

| rest splunk_server=splunksearchhead101 /services/server/status/limits/search-concurrency gives me

max_hist_searches = 16 (10*1 +6); max_hist_scheduled searches= 8 (0.5* max_hist_searches) and max_auto_summary_searches =4 (0.5* max_hist_scheduled_searches)

But sometime SH throws error "system wide concurrency reached limit=24 reached=24"

So my question is
Is system wide concurrency = max_hist_searches + max_hist_scheduled_searches?
I am of the opinion that system wide concurrency = max_hist_searches(16)

Also what would be my cluster wide search concurrency?

Thanks & Regards,
Ankith

[adonio · Accepted solution]

here is a very detailed answer
https://answers.splunk.com/answers/270544/how-to-calculate-splunk-search-concurrency-limit-f.html
couldn't explain it better.

hope it helps