How do I resolve splunk integrity check error?

aatik5u — Mon, 21 Nov 2022 14:16:35 GMT

Hello there,

I have been trying to use splunk check-integrity to check the integrity of some indexes.

I have the error: Integrity check error for bucket with path=..\Splunk\var\lib\splunk\defaultdb\db\b_1668784284_1668613842_9, Reason=Journal has no hashes.

I do know that the events indexed before adding enableDataIntegrityControl=true to indexes.conf are not treated, but I thought the buckets created after the use of enableDataIntegrityControl=true would have a hash. bur it is not the case.

Am I missing somthing?

Thank you.

topic How do I resolve splunk integrity check error? in Security

How do I resolve splunk integrity check error?