Knowledge Management

KV Store - All queries takes 10 seconds to finish

okheggdal
Explorer

Hi,

We have a clustered environment with 3 SHC and 2 indexers. We have been using KV Store with great success as an alternative to csv files for lookups. However, we had a DNS issue with one of the indexers and after this the requesting data from the KV Store takes 10.2 seconds regardless of the collection size.

From what I can tell the cluster is healthy and the mongod.log does not show any problems. When I make a request for data from a collection I see the 10 seconds are spent at the same in search log:

01-24-2019 10:37:57.355 INFO  SearchStatusEnforcer - Enforcing disk quota = 10485760000
01-24-2019 10:37:57.355 INFO  PreviewExecutor - Preview Enforcing initialization done
01-24-2019 10:37:58.356 INFO  ReducePhaseExecutor - ReducePhaseExecutor=1 action=PREVIEW
01-24-2019 10:38:07.629 INFO  PreviewExecutor - Stopping preview triggers since search almost finished
01-24-2019 10:38:07.629 INFO  DispatchExecutor - END OPEN: Processor=noop
01-24-2019 10:38:07.635 INFO  ReducePhaseExecutor - Ending phase_1

Is there anyone that have an idea what might be causing this?

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...