Hi folks,
I want to monitor my scheduled searches, e. g. I need to know if a schedulded search run while an indexer was down, which could lead to uncomplete results.
Does anyone know where to get those information? I'm aware of the fact that there is a sourcetype=scheduler in the _internal logs, but in this enviroment here (100gb+ per day) there are only 15 searches with a status != success while searching over all time. It seems that a scheduled search still has the status=success even if one of the indexer was down, which is an unexpected behaviour for me.
Any thoughts on this?
Kind regards, Felix