Hi,
We are using Enterprise 6.4.0 with Splunk Enterprise Security 4.1.1. We have installed the Splunk App for ES Health Check.
Yesterday, we noticed ES (via the health app) 'Searches' were reporting 67% of the searches were being skipped and we don't know why. We have checked logs, ES search head, and our indexers (and cluster) are all reporting ok.
As always thank you.
↧