Splunk Search

Priority of a search error- How do find what searches are high priority and what are non-high priority search in splunk?

Sithima
Explorer

The splunkd health has the following message: 

The percentage of non-high priority searches skipped (97%) over the last 24 hours is very high and exceeded the red thresholds (20%) on this Splunk instance. 

How do find what searches are high priority and what are non-high priority search in splunk?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You can use REST to display the priority of each scheduled search.

 

| rest /servicesNS/-/-/saved/searches splunk_server=local | fields title eai:acl.app schedule_priority

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...