Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
284 results
Sort by:
06-12-2014
05:03 PM
1 Karma
In the scheduler logging, I see status=continued. What exactly does that mean?
09-08-2016
01:37 PM
4 Karma
Looking at scheduler.log from a search head cluster member, the scheduler.log has a status column that can have following values:
delegated_remote
delegated_remote_completion
d...
Hi ,
One of the scheduled search fails at the time9and even changed) with this error in scheduler.log
status=delegated_remote_error
Pls help
Regards
Shrdadha
- Tags:
- scheduled-search
08-22-2017
08:34 AM
We have a log of saved searches working simultaneously in our search head. Around 70% of which are resulting status= Continued.
What does it mean, does it affect the alerts that we have created, d...
01-14-2021
06:52 AM
...umber of savedsearches that trigger on cron (every 5m, 15m, 30m, 1h etc) and we are working to minimise the concurrency by introducing Scheduler Window & Skew. I know exactly which searches are t...
08-26-2015
06:19 AM
Dear Splunk Community,
I need to connect with IBM tool TWS (Tivoli Work Scheduler) using SPLUNK to get the real-time status of jobs and through dashboards.
Currently, we use another IBM tool J...
02-18-2015
01:43 PM
3 Karma
If looking at scheduler log from a single search head in the search head cluster, what does status=delegated_remote OR status=delegated_remote_completion mean? Does it mean that the search that was r...
11-08-2018
11:52 PM
...ran was:
index=_internal sourcetype=scheduler savedsearch_name="" |stats min(_time) as _time values(status) as status by sid | search status!="success" | sort - _time
Referring to the post b...
12-03-2018
12:16 AM
1 Karma
Hi
Is there some place in Splunk Docs where I can find the definition of the field status in _internal log , source type scheduler ?
I have some searches with value null for that field but I a...
- Tags:
- splunk-enterprise
03-21-2018
06:59 AM
...ccessible for me: $SPLUNK_HOME/var/log/splunk/web_service.log.
Also no idea about scheduler.log
- Tags:
- splunk-enterprise
