Scheduled Search Skipped

Follow

Cameron Ditchfield

• March 11, 2019 15:21
• Edited

I've started seeing "Scheduled search skipped" messages in the audit index for scheduled searches I changed about 6 hours earlier. The only change was to their schedule: from running every 15 minutes with a -17m -2m time range to a real time search with a 15 minute time range.

What causes a scheduled search to be skipped, and what can I do to fix it?

These searches began being skipped intermittently around 22:00 UTC on 2019-03-08.

0

• Official comment

  

  Matt Sullivan

  • March 25, 2019 15:41

  Why-Would-a-Scheduled-Search-Fail lists a few common reasons. Since a real-time alert basically runs continuously, testing the performance is critical. If after ruling out some of the common reasons doesn't resolve, you might open a support ticket and we'll be happy to look into it.

  Permalink

Please sign in to leave a comment.