This usually indicates problems with underlying storage performanc

[Alnardo]

[serversindex] Configuration initialization for /opt/splunk/var/run/searchpeers/serverhead-1721913866 took longer than expected (1002ms) when dispatching a search with search ID remote_serverhead_userxx__userxx__search__search1_1723144245.50. This usually indicates problems with underlying storage performance.

[gcusello]

Hi @Alnardo ,

which type of disks are you using for your Search Head and your Indexers?

how many IOPS have your disks?

remember that Splunk requires at least 800 IOPS and if you have more performat disks you'll have more performat searches.

For more infos see at https://docs.splunk.com/Documentation/Splunk/9.3.0/Capacity/Referencehardware

Ciao.

Giuseppe

[isoutamo]

This could be storage performance issue or it could be that your environment is too small for your workload.
As said, 1st you should check storage performance and if it’s enough then look from you MC (monitoring console) other resource usage etc.

[isoutamo]

And the question is?

[Alnardo]

How can I solve that?