We have a savedSearch being scheduled, and an action selected to handle the alert. This is on a search head.
But the action never triggered. The splunkd.log shows:
event=SHPMaster::delegateSearchJob schedule job failure. peer could not be selected, .....
We can run the savesearch directly without problem. The Distributive Search page-> Search peers page shows the peer (we have only one) as Enabled/Healthy/Up.
How to debug this problem please?
Thanks!
↧