Scheduled Search Skipped
I've started seeing "Scheduled search skipped" messages in the audit index for scheduled searches I changed about 6 hours earlier. The only change was to their schedule: from running every 15 minutes with a -17m -2m time range to a real time search with a 15 minute time range.
What causes a scheduled search to be skipped, and what can I do to fix it?
These searches began being skipped intermittently around 22:00 UTC on 2019-03-08.
-
Official comment
Why-Would-a-Scheduled-Search-Fail lists a few common reasons. Since a real-time alert basically runs continuously, testing the performance is critical. If after ruling out some of the common reasons doesn't resolve, you might open a support ticket and we'll be happy to look into it.
Comment actions
Please sign in to leave a comment.
Comments
1 comment