Hi,
I'm trying to set 2 rules in my workloadmanagement pool -
search_type=adhoc AND runtime>1m -> Move search to alternate Pool: limited_perf
&
search_type=adhoc AND runtime>1...
We have a heavy forwarder running some Add-ons, and one of them (SNow) is eating up all the memory. We have workloadmanagement enabled on our search head clusters for cpu/memory management, but w...
Currently the setup is likes this where i want to implement WorkloadManagement ,so that the jobs need to balance all across Multisite Indexer Cluster.
Infra:-
5nos of Search Head Cluster(E...
I'm trying to create an admission rule in workloadmanagement with the following syntax: any search with "=*" in the index will return a predefined message. my intention is to block any search t...
I'm following the example provided here. https://docs.splunk.com/Documentation/Splunk/9.0.2/Workloads/AdmissionRules#Example_admission_rules search_time_range=alltime AND (NOT role=sc_admin) AND (N...
Hi All - This is my first time looking and using workloadmanagement in Splunk Cloud. I am having trouble making my rule work regarding moving the search to alternate pool or placing search into o...
I'm looking to enable WorkloadManagement for Splunk and I'm just trying to understand whether this is fully supported on a deployment which is using cgroups v2. Based on the documentation, the w...
Hi, Using WorkloadManagement - Admission Rules, I cannot embed a URL or list a URL in the User Message since it does not accept "/" Is there a workaround? I want to provide users a link to a...
Hi, Been struggling to get Workload Admission Rules working properly. After a bunch of testing and monitoring with the MC Workload Dashboards, I can see that only searches generated f...