Splunk search for Indexing queue sizes
Copy
index=_internal source=*metrics.log group=queue (name=parsingqueue OR name=indexqueue OR name=typingqueue OR name=aggqueue) | timechart avg(current_size) by name | rename *queue as *
This Splunk search will provide details on the queue size for each of the Splunk indexing pipelines. The search outputs a timechart with the average queue size for the parsing pipeline, the merging pipeline, the typing pipeline and the indexing pipeline.
0 comments
[0]
[0]
[0]
[0]
Sign in or Register to submit a comment