How do I fix Analyzer error "backed-up - High queue size"?
Best Answer
-
Andrew Administrator
If the Reports Summarizer service stops processing syslogs, the following message may be received:
Warning: Backed-Up Syslog Files Status on Monday, October 21, 2019 11:37:42 AM UTC (2019-10-21 11:37:42 UTC)
summarizer: backed-up - High queue size
Summarizer at X.X.X.X has 1417 syslog files in queue.
Please see Console > Help > Tips and Tutorials for more information on how to optimize summarizer performance.
Possible cause:
There a couple reasons that syslog processing can get backed up and result in the error message:
- Optimization is in process. This can be verified on the Console>Diagnostics>Summarizer Status page of GMS/Analyzer. Look for the Optimization Info listed under the Summarizer Details. During certain times of the optimization process syslogs are not summarized. If you see an import in process, allow a few hours for this to finish and verify that your syslog count starts to drop.
2. The Reports Summarizer service was interrupted or stopped unexpectedly.
Resolution:
- If optimization is still running, this is a daily process that needs to be allowed to finish. Check on the status of the optimization and backed-up syslogs every couple hours to verify Optimization State becomes IDLE and that the number of syslogs in queue starts decreasing.
- Any issues with the Reports Summarizer will require the service be restarted. After approx. 5 mins, verify that the amount of syslogs in queue starts decreasing.
6