Splunk Search

Performance issue on index

tbalouch
Path Finder

Hi Guys,

I get the following error below:

Any ideas on what may be causing it?

The list of indexes to be searched by default for the admin user includes 'All non-internal indexes' which may cause performance problems

Tags (2)
1 Solution

icalderon
Engager

I looked under Roles for the admin user and you can see the "all non-intenral indexes" is selected for indexes. You can select one of the other available indexes. I haven't decided which one to select. Just fyi.

All internal indexes
-audit
blocksignature
internal

View solution in original post

icalderon
Engager

I looked under Roles for the admin user and you can see the "all non-intenral indexes" is selected for indexes. You can select one of the other available indexes. I haven't decided which one to select. Just fyi.

All internal indexes
-audit
blocksignature
internal

Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...