Splunk Search

dispatch reaper metrics

jplumsdaine22
Influencer

In 6.5 it looks like there is a new metric event that tracks the dispatch reaper. You can view it with

index=_internal  sourcetype=splunkd dispatch_dir_reaper_mean_ms 

Consistently the value for dispatch_dir_reaper_mean_ms is several orders of magnitude higher than dispatch_dir_reaper_max_ms, which is strange considereing the field names

Has anyone else seen this or know if it signifies anything?

Tags (3)
0 Karma
1 Solution

jplumsdaine22
Influencer

From the 6.5.3 release notes, it appears that this is a known issue:

2016-09-15 SPL-128845, SPL-131108, SPL-131106 Distributed Search: Deployment -- Time to Reap : Dispatch Directory ... max < average time

View solution in original post

0 Karma

jplumsdaine22
Influencer

From the 6.5.3 release notes, it appears that this is a known issue:

2016-09-15 SPL-128845, SPL-131108, SPL-131106 Distributed Search: Deployment -- Time to Reap : Dispatch Directory ... max < average time

0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...