You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
26 lines
1.3 KiB
26 lines
1.3 KiB
{
|
|
"__class__": "rapid_diag.task.Task",
|
|
"collectors": [
|
|
{
|
|
"__class__": "rapid_diag.collector.search_result.SearchResult",
|
|
"search_query": "| rest /servicesNS/<user>/<app>/saved/searches/<saved search name>/history",
|
|
"action_needed": "Please change <user>, <app>, and <saved search name> to reflect a search that is struggling"
|
|
},
|
|
{
|
|
"__class__": "rapid_diag.collector.search_result.SearchResult",
|
|
"search_query": "| rest /servicesNS/<user>/<app>/saved/searches/<saved search name>/history",
|
|
"action_needed": "Please change <user>, <app>, and <saved search name> to reflect a search that is working fine"
|
|
},
|
|
{
|
|
"__class__": "rapid_diag.collector.diag.Diag"
|
|
}
|
|
],
|
|
"name": "Search scheduling",
|
|
"collector_tool_names": "search, splunkdiag",
|
|
"description": "For investigating and evaluating the Splunk Enterprise search scheduler. The collector monitors and compares the behavior for a selected pair of scheduled searches. Run the template on a search head, or the search head cluster captain. The template requires the name of two saved searches to compare.",
|
|
"host": "",
|
|
"task_id": "scheduler-issues",
|
|
"features" : [ "searches_skipped", "searches_delayed", "search_lag" ],
|
|
"symptoms" : [ "scheduler-issues" ]
|
|
}
|