Splunk® Enterprise

Monitoring Splunk Enterprise

Download manual as PDF

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Scheduler activity

This topic is a reference for the Scheduler activity dashboards in the Distributed Management Console. See About the Distributed Management Console in this manual.

What do these views show?

The Scheduler activity: Deployment view in the Distributed Management Console shows an overview of the search or report scheduler.

These views show activity and success rate of the scheduler. Of all the searches that attempted to run, what was the success rate? concurrency, schedule workload can get in the way. The panels in these view qualify the type of failure. Skip ratio and execution latency quantify the scheduler's performance.

The scheduler activity views are useful whether or not you are using search head clustering. If you have a SHC, be aware that there is another view that you might find useful, in the search head clustering section: scheduler delegation, which deals with how the captain orchestrates scheduler jobs.

Interpret results in these views

In the deployment view, the Statistics panel describes how things are performing per instance, but including all instances in the deployment. For example, maximum is the max on any individual instance in the deployment.

What to look for in these views

If your scheduler reaches the maximum allowed concurrent searches, you will run into problems scheduling additional or long-running searches. See Configure the priority of scheduled reports for more information.

The snapshot quantities skip ratio and average execution latency should both be low.

The following is an example Scheduler activity: Instance panel for a scheduler that is skipping reports.

Screen Shot 2016-03-04 at 3.01.42 PM.png

To find why the scheduler is skipping reports, scroll down to the panel labeled Count of skipped reports by name and reason.

Troubleshoot these views

The scheduler activity dashboards require the monitored instances to be running Splunk Enterprise 6.3.0 or greater.

Make sure you have completed all of the DMC setup steps.

PREVIOUS
Search usage statistics dashboards
  NEXT
Indexing performance: Instance

This documentation applies to the following versions of Splunk® Enterprise: 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters