Hello Splunkers
The actual time in job inspector seems to not be very long
But usually there is long latency and job inspector logs are stuck at this point..
INFO DispatchThread - Generating results preview took....
11-17-2017 11:32:26.928 INFO LocalCollector - Final required fields list = _bkt,_cd,_si,_subsecond,host,index,linecount,source,sourcetype,splunk_server
11-17-2017 11:32:26.928 INFO UserManager - Unwound user context: bondo -> NULL
11-17-2017 11:32:26.928 INFO UserManager - Setting user context: bondo
11-17-2017 11:32:26.928 INFO UserManager - Done setting user context: NULL -> bondo
11-17-2017 11:32:26.928 INFO UserManager - Unwound user context: bondo -> NULL
11-17-2017 11:32:37.438 INFO DispatchThread - Generating results preview took 1 ms
11-17-2017 11:32:47.441 INFO DispatchThread - Generating results preview took 1 ms
11-17-2017 11:32:57.444 INFO DispatchThread - Generating results preview took 1 ms
Are there any tshoot steps for this , perhaps dispatch directory issue etc?
↧