Search is queued: The maximum number of historical concurrent system-wide searches has been reached. current=11 maximum=10 Search not executed!

[wudu0517]

I'm in search of the above tips on how to solve?

[wudu0517]

Splunk 5.0.1 ,

limit.conf
[subsearch]
maxout=10000
maxtime = 1800

[alacercogitatus]

What version of Splunk? Did you change anything in limits.conf?

[wudu0517]

Splunk Search Head 2 CPU 8 core, 8G memory

[fengjie]

I try, thank you very much!

[alacercogitatus]

How many CPU and How Much RAM does your Search Head have?

[jtrucks]

Go to Manage -> Access controls -> Roles. I suspect you are a Power user (or other role with similar job limit settings), so either create a new role or edit Power to increase "Limit concurrent search jobs" to a higher number.

[linu1988]

It depends on the role of the user and maximum number of searches allowed to that use. You can see them in access control->roles->Role_Name if you are an ADMIN. There you can modify the number of searched availed to the role, which the user belong to. Thanks.