Issue with scheduler on SHC around search quotas. "usage" metric continually increases until it surpasses role-based quota, blocking scheduled jobs.
Affected users will display WARNs in splunkd.log like the following. Note: these messages can be legit, but volume is an indicator.
We have found that affected users generate the below warning every 7 seconds for each scheduled search they have.
| #!/bin/sh | |
| # | |
| # chkconfig: 35 99 99 | |
| # description: Node.js /home/ghost/ghost/index.js | |
| # | |
| . /etc/rc.d/init.d/functions | |
| USER="ghost" |
| 1) Install MAMP normally | |
| 2) Download the latest binary of tomcat from http://tomcat.apache.org/ and extract it into the MAMP folder | |
| (you should now have a /Applications/MAMP/apache-tomcat-version folder) | |
| 3) Create a link to the apache-tomcat folder: | |
| ln -s /Applications/apache-tomcat-7.0.37/ tomcat | |
| 4) Make sure all the binaries are executable: | |
| cd /Applications/tomcat/bin |