Why are we getting this error and how do we fix this?
Did you find a resolution to fix the error?
Generally you either have so many searches running that your Splunk can't keep up, search bundles too large because you have huge lookup files, etc. Or you disk I/o subsystem is too slow for one reason or another.
How many active jobs do you have in the job monitor?
Are you using NFS?
Are you seeing any other errors in index=_internal log_level=error ?
Please, I have the same problem and I don't know how to solve it. Could you please show me the specific action to solve it. Thanks a lot.
That's cool we are running the dashboard which contains 10 query's but what is the solution to run more than 10 query to increase the capacity to run 20 query!
any answer on this?