Splunk Search

Workload Management - Admission Rules only working on Cluster Master

chrisboy68
Contributor

Hi, 

 

Been struggling to get Workload Admission Rules working properly. After a bunch of testing and monitoring with the MC Workload Dashboards, I can see that only searches generated from the CM are applying the Admission Rule Filter. All other search heads ignore the filter. 

Anyone run into this issue? On 8.1.3 Splunk Enterprise. 

 

Thank you!

 

Chris

 

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

More information, please.  The question mentions "Cluster Master", "CM", and "MC", but they are two different things.  Which are we talking about?  Where and how did you define the workload admission rules?  Are the search heads clustered?

---
If this reply helps you, Karma would be appreciated.
0 Karma

chrisboy68
Contributor

Hi, The CM is the only node that is applying the Admission Rules. after my test. The MC, has a set of dashboards to monitoring Workload Management - Admission Rules. 

The admission rules are applied at the SH and yes they are clustered. 

 

Thanks!

 

Chris

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...