Hi, I hope all is well. I am writting to ensure i am getting the correct picture on the SHC search: Assumption:  3x search head with CPU: 32 cores. max search per cpu = 2 max_hist_searches =  max_searches_per_cpu x number_of_cpus + base_max_searches (our environment is 70 per node) Max Scheduled Search = 50% * max_hist_searches  = 35  Max Summarization  = 50% * Scheduled Search =17 Max Ad hoc guaranteed = 35 Remaining — always reserved for analysts Only SCHEDULED searches are coordinated by the captain across nodes Reference: https://help.splunk.com/en/splunk-enterprise/administer/distributed-search/10.4/manage-search-head-… https://community.splunk.com/t5/Reporting/How-to-calculate-Splunk-search-concurrency-limit-for-hist… Are You Skipping? Please Read! | Splunk For Real-time searches: max_rt_searches = max_rt_search_multiplier x max_hist_searches Max real-time searches = 1 * 70 = 70 ( our environment per node). Max real-time scheduled searches = 50% x 70 = 35 Max Ad hoc guaranteed = 35 Remaining — always reserved for analysts    As per the above, we can conclude the below per each node: Historical ad hoc → shared 70 pool (User manuall search past data) Historical scheduled → 35 (50% of 70)  Summarization → 17 (50% of 35) (Datamodel) RT scheduled → 35 (separate RT pool, independent)  RT ad hoc → 35 (RT guaranteed, reserved for analysts) (User manually search for RT live stream data) Scheduled ad hoc → does not exist         ... View more