Which kind of jobs running as splunk-system-user generate this kind of searches?
For instance the
"| subsearch" are a bit elusive but we can always kick off the job inspector to get the original search which triggered them.
not for "| (This job cannot be viewed in the UI) " though
Any idea ?
All of a sudden got 32 searches with a run time of 0 seconds being kicked off
↧