Hi ,
One of the scheduled search fails at the time9and even changed) with this error in scheduler.log
status=delegated_remote_error
Pls help
Regards
Shrdadha
There should be more log entries than this that relate to that time frame, there may be hints in the splunkd.log file around this point in time.
I wrote a search for this called "SearchHeadLevel - Scheduled Searches That Cannot Run", it's in the Alerts For Splunk Admins app...however you would have to setup the macros for it to work as expected...
Is there any other details in scheduler.log?