https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271910#M14967 <P>To correct this, browse to /opt/splunk/var/lib/splunk/persistentstorage/fschangemanager_state/ and in that directory, there is also a file called "fschangemanager_state". Rename that file or move it to a temporary location and then restart Splunk.</P> Tue, 29 Sep 2020 09:25:34 GMT rmorlen_splunk 2020-09-29T09:25:34Z https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271909#M14966 <P>04-01-2016 06:55:15.159 -0500 ERROR SQLitePersistentStorageImpl - Error processing enumerate: database disk image is malformed<BR /> 04-01-2016 06:55:16.538 -0500 ERROR FSChangeMonitor - Exception thrown in update(2) - continuing</P> <P>This happened after server crashed due to raid card error </P> Fri, 01 Apr 2016 12:44:10 GMT https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271909#M14966 univofmem 2016-04-01T12:44:10Z https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271910#M14967 <P>To correct this, browse to /opt/splunk/var/lib/splunk/persistentstorage/fschangemanager_state/ and in that directory, there is also a file called "fschangemanager_state". Rename that file or move it to a temporary location and then restart Splunk.</P> Tue, 29 Sep 2020 09:25:34 GMT https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271910#M14967 rmorlen_splunk 2020-09-29T09:25:34Z https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271911#M14968 <P>Thanks..Fixed it. </P> Fri, 15 Apr 2016 13:53:16 GMT https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271911#M14968 univofmem 2016-04-15T13:53:16Z https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271912#M14969 <P>I am seeing this error on a system with a UF, does this process need to be done on the UF or the splunk server. If splunk server, which server in a distributed env?</P> Wed, 14 Jun 2017 13:36:45 GMT https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271912#M14969 brent_weaver 2017-06-14T13:36:45Z https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271913#M14970 <P>This would be on the server running the UF since it is doing the monitoring.</P> Wed, 14 Jun 2017 14:26:33 GMT https://community.splunk.com/t5/Security/having-hundreds-of-sqlitePersistentStorageImp-errors-in-splunkd/m-p/271913#M14970 rmorlen_splunk 2017-06-14T14:26:33Z