Splunk® Enterprise

Monitoring Splunk Enterprise

Acrobat logo Download manual as PDF

Splunk Enterprise version 6.x is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Acrobat logo Download topic as PDF

Scheduler activity

This topic is a reference for the Scheduler activity dashboards in the Distributed Management Console. See About the Distributed Management Console in this manual.

What do these views show?

The Scheduler activity: Deployment view in the Distributed Management Console shows an overview of the search or report scheduler.

These views show activity and success rate of the scheduler. Of all the searches that attempted to run, what was the success rate? concurrency, schedule workload can get in the way. The panels in these view qualify the type of failure. Skip ratio and execution latency quantify the scheduler's performance.

The scheduler activity views are useful whether or not you are using search head clustering. If you have a SHC, be aware that there is another view that you might find useful, in the search head clustering section: scheduler delegation, which deals with how the captain orchestrates scheduler jobs.

Interpret results in these views

In the deployment view, the Statistics panel describes how things are performing per instance, but including all instances in the deployment. For example, maximum is the max on any individual instance in the deployment.

What to look for in these views

If your scheduler reaches the maximum allowed concurrent searches, you will run into problems scheduling additional or long-running searches. See Configure the priority of scheduled reports for more information.

The snapshot quantities skip ratio and average execution latency should both be low.

The following is an example Scheduler activity: Instance panel for a scheduler that is skipping reports.

Screen Shot 2016-03-04 at 3.01.42 PM.png

To find why the scheduler is skipping reports, scroll down to the panel labeled Count of skipped reports by name and reason.

Troubleshoot these views

The scheduler activity dashboards require the monitored instances to be running Splunk Enterprise 6.3.0 or greater.

Make sure you have completed all of the DMC setup steps.

Last modified on 02 August, 2016
Search usage statistics dashboards
Indexing performance: Instance

This documentation applies to the following versions of Splunk® Enterprise: 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters