Hi,
I have splunk Waiting for queued job to start getting error for a particular user however no jobs are queued for that user in the Job monitor, the role can run 50 concurrent searches and is only affected this user.
Also no jobs are in queued,Parsing,Finalising or Finalised.
Any advice?
Thanks
How about your environment? Which kind it is?
You can always look those internal indexes on your nodes logs like .../var/log/splunk directory.
What you will get with query
index=_audit user=<your user>
Are there any hints why he/she cannot run those queries?
What is a topology of your environment (distributed, single node etc)?
r. Ismo
Hi,
The user is me and I get the message queued and I have the admin role.
How about your environment? Which kind it is?
You can always look those internal indexes on your nodes logs like .../var/log/splunk directory.