Wouldn't avg(KBps) be the correct function here? Otherwise you would be presenting the sum of the individual measurements during the 15 min span. That would not be per second. ... View more

Hi, I had the exact same behaviour but in my case the root cause was a firewall between the search head cluster peers that did not allow communication on kvstore replication port (default 8191) ... View more