Skip to main content
Version: Atlas 2022.3.2

Scheduling Assistant Overview


Scheduling Assistant

Scheduled searches in Splunk, if not managed appropriately, can directly impact the performance of Splunk. In a mature Splunk environment it is not uncommon to have scheduled search bottlenecks. These bottlenecks will use up valuable resources your Splunk environment needs to serve Splunk users. When your Splunk users are competing with scheduled searches, your users are waiting in the search queue for resources to become available to execute their search or display their dashboard or report. Worse yet, when you have concurrency spikes in your Splunk environment, your searches might be skipped causing critical alerts to not run at all!

Atlas Scheduling Assistant is a powerful tool that not only shows you where scheduled search concurrency exists in your Splunk environment, but also provides you with tools that automatically recommend how to resolve this problem and automatically apply fixes. This eliminates the need for Splunk administrators to spend countless hours searching for and manually testing changes to optimize search schedules. With Scheduling Assistant, you can reduce the time to optimize scheduled searches from days to minutes giving valuable time back to your Splunk administration Team.

Scheduling Assistant Capabilities

  • Health Score revealing concurrency issues in environment that can hamper usability and accuracy

  • Scheduling Activity module that helps identify searches activating in high concurrency bottlenecks

  • Scheduling Assistant visualizations to identify searches with high Skipped Ratios, high average run times, high latency

  • Cron Editor feature to change the scheduling of a search by testing concurrency of current and potential cron schedules with regards to environment bottlenecks

  • Cron Creator dashboard for creating and validating cron schedules in application