My Splunk Enterprise version on cluster is 9.0.0.1 and I am also pacing this problem: Ingestion Latency Root Cause(s): Events from tracker.log are delayed for 48517 seconds, which is more than the red threshold (180 seconds). This typically occurs when indexing or forwarding are falling behind or are blocked. ..... Unhealthy Instances: search-head-02 If anyone can solve this problem. Please help us!
... View more