Splunk Search

Why am I getting "waiting for your queued job to start" message while running search queries?


I get a message "waiting for your queued job to start" while running search queries.
Anybody knows why this message is showing up?

Tags (1)
0 Karma

New Member

The error occurs because the disk quota allocated to you for saved searches is exceeded. Hence, only deleting the searches in Jobs section can be temporary helpful and which needs sometime around 5 mins for getting refresh.

0 Karma


Not sue you go the answer already ..
The message is due to a setting in the configuration that limits number of concurrent searches:
srchJobsQuota in authorize.conf

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...