Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Looking at the job inspector, why is startup.handoff taking majority of the search time?

$
0
0
Pastebin of search.log: http://pastebin.com/aAzw697G Job inspect statistics: 0.00 command.fields 15 197 197 0.08 command.search 15 - 197 0.04 command.search.index 24 - - 0.01 command.search.filter 2 - - 0.00 command.search.calcfields 2 1,167 1,167 0.00 command.search.fieldalias 2 1,167 1,167 0.00 command.search.index.usec_1_8 489 - - 0.00 command.search.index.usec_512_4096 5 - - 0.02 command.search.rawdata 2 - - 0.01 command.search.kv 2 - - 0.00 command.search.typer 2 197 197 0.00 command.search.lookups 2 1,167 1,167 0.00 command.search.summary 15 - - 0.00 command.search.tags 2 197 197 0.00 dispatch.check_disk_usage 1 - - 0.00 dispatch.createdSearchResultInfrastructure 1 - - 0.04 dispatch.evaluate 1 - - 0.03 dispatch.evaluate.search 1 - - 0.04 dispatch.fetch 16 - - 0.06 dispatch.localSearch 1 - - 0.01 dispatch.readEventsInResults 1 - - 0.08 dispatch.stream.local 15 - - 0.31 dispatch.timeline 16 - - 0.05 dispatch.writeStatus 6 - - 0.02 startup.configuration 1 - - 0.64 startup.handoff 1 - -

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>