I have users that are unable to get search results. They receive a message that no results were found when an admin user can actually see the results. The error showing in the log is below:
04-16-2013 14:42:22.444 -0500 ERROR SearchResults - Unable to open output file: path=\VM-SplunkHead1.ad.hs.uab.eduPoolingShareetcusersttesterRSASecurIDhistoryvm-splunkhead3.csv.tmp1 error=The process cannot access the file because it is being used by another process.
We are using search head pooling between 3 search heads.