Skip to main content
Version: Atlas v3.14

Scheduling Assistant Overview

Banner

Scheduling Assistant​

If not managed appropriately, scheduled searches can directly impact the performance of the Splunk environment. In a mature Splunk environment it is not uncommon to have poorly configured scheduled search and scheduling bottlenecks that lead to environment slowdowns, CPU over-utilization, and skipped searches. For Splunk users, this means their active investigations get stuck in the search queue, waiting for resources to become available. Worse yet, when you have concurrency spikes in your Splunk environment, your searches might be skipped causing critical alerts to not run at all!

Atlas Scheduling Assistant is a powerful tool that not only shows you the heartbeat of your Splunk scheduler, but also provides you with tools to triage and resolve this problem. This eliminates the need for Splunk administrators to spend countless hours searching for and manually testing changes to optimize search schedules. With Scheduling Assistant, you can reduce the time to fix and the time to optimize scheduled searches from days to minutes, giving valuable time back to your Splunk administration Team.

Scheduling Assistant Capabilities​

  • Visualizations to identify periods of high pending, scheduled, and skipped scheduled searches

  • Fully automated re-balance of search schedules leveraging automation to reduce workload

  • Test and apply new schedules with recommendations to searches to reduce skip rates and improve system performance

  • Prioritized list of scheduled searches to triage based on environmental impact, best practice, and poor historical performance

  • Acknowledge identified searches, enabling admins to log work and decisions in Atlas

  • Self Service email alert to notify owners of skipped searches that their search has failed to execute and direct guidance on how to resolve the issue

  • Cron Helper dashboard for creating and validating cron schedules in application