Reporting

scheduled job fails with status=delegated_remote_error

Mohsin123
Path Finder

Hi ,

One of the scheduled search fails at the time9and even changed) with this error in scheduler.log

status=delegated_remote_error

Pls help

Regards
Shrdadha

Tags (1)
0 Karma

gjanders
SplunkTrust
SplunkTrust

There should be more log entries than this that relate to that time frame, there may be hints in the splunkd.log file around this point in time.

I wrote a search for this called "SearchHeadLevel - Scheduled Searches That Cannot Run", it's in the Alerts For Splunk Admins app...however you would have to setup the macros for it to work as expected...

0 Karma

p_gurav
Champion

Is there any other details in scheduler.log?

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...