I have many jobs scheduled to run on a regular basis in splunk, some every 30 minutes some every 5 minutes. Today, for no obvious reason, two of the jobs stopped running. I have tried unscheduling and rescheduling the jobs and even diasabling and re-enabling them. But still the time for the jobs comes and goes and no job is fired. If I look in the jobs list I see no records for these jobs.
Has anyone seen this happen before? Is there somewhere I can look to see if the jobs are failing for some reason?
thanks,
Keith
You can also search for these within Splunk too:
index=_internal source=*scheduler.log "My scheduled search name"
Could be CPU related . . . http://splunk-base.splunk.com/answers/33717/scheduled-searches-for-summary-index-does-not-run-no-ski...
You can also search for these within Splunk too:
index=_internal source=*scheduler.log "My scheduled search name"
Check the $SPLUNK_HOME/var/log/splunk/scheduler.log to see if your scheduled saved search ever run.