Based on Can I see the top skipped searches?
I got a couple of offending queries, with a message such as - The maximum number of concurrent running jobs for this historical scheduled search on this instance has been reached (279)
.
How can I find the average run time of this query - Lookup_Update
?
You can check the job listing (Activity->Job) or run this search (substitute a specific search name, if you wish):
index=_internal source=*scheduler.log run_time=* savedsearch_name=* | stats avg(run_time) as avgRunTime by savedsearch_name
You can check the job listing (Activity->Job) or run this search (substitute a specific search name, if you wish):
index=_internal source=*scheduler.log run_time=* savedsearch_name=* | stats avg(run_time) as avgRunTime by savedsearch_name
The run_time
is in seconds, right?
Yes, it's in seconds.