https://community.splunk.com/t5/Security/Trying-to-run-the-Distributed-Management-Console-getting-quot/m-p/260419#M7151 <P>I'm an idiot.</P> <P>Problem was that mongod copied the server.pem which expired last week; as per another note in Answers I found:</P> <P>$SPLUNK_HOME/bin/splunk createssl server-cert -d . -n server</P> <P>And that created another server.pem; likely this is related to the tech-note which Splunk sent out talking about expiring certificates. </P> <P>Restarted splunk after making a new server.pem, all good.</P> Sun, 22 May 2016 22:51:42 GMT howyagoin 2016-05-22T22:51:42Z https://community.splunk.com/t5/Security/Trying-to-run-the-Distributed-Management-Console-getting-quot/m-p/260418#M7150 <P>Hi,</P> <P>When trying to Run DMC (ha ha), I've noticed that it's failing to get the introspection data from the kvstore.</P> <PRE><CODE>05-22-2016 17:52:08.996 +1000 ERROR KVStorageProvider - An error occurred during the last operation ('serverStatus', domain: '2', code: '5'): Failed to connect to target host: 127.0.0.1:8191 05-22-2016 17:52:08.996 +1000 ERROR KVStoreIntrospection - failed to get introspection data 05-22-2016 17:52:09.072 +1000 ERROR KVStorageProvider - An error occurred during the last operation ('serverStatus', domain: '2', code: '5'): Failed to connect to target host: 127.0.0.1:8191 05-22-2016 17:52:09.072 +1000 ERROR KVStoreIntrospection - failed to get introspection data 05-22-2016 17:52:09.142 +1000 ERROR KVStorageProvider - An error occurred during the last operation ('serverStatus', domain: '2', code: '5'): Failed to connect to target host: 127.0.0.1:8191 05-22-2016 17:52:09.142 +1000 ERROR KVStoreIntrospection - failed to get introspection data </CODE></PRE> <P>There must be something incredibly trivial that I'm missing here - I've set the Splunk Enterprise box to have a KV Store, but haven't created anything in a collections.conf (as it's not clear what needs to be set up for the distributed management console to work).</P> <P>There's likely something obvious here...hints appreciated.</P> Sun, 22 May 2016 07:57:56 GMT https://community.splunk.com/t5/Security/Trying-to-run-the-Distributed-Management-Console-getting-quot/m-p/260418#M7150 howyagoin 2016-05-22T07:57:56Z https://community.splunk.com/t5/Security/Trying-to-run-the-Distributed-Management-Console-getting-quot/m-p/260419#M7151 <P>I'm an idiot.</P> <P>Problem was that mongod copied the server.pem which expired last week; as per another note in Answers I found:</P> <P>$SPLUNK_HOME/bin/splunk createssl server-cert -d . -n server</P> <P>And that created another server.pem; likely this is related to the tech-note which Splunk sent out talking about expiring certificates. </P> <P>Restarted splunk after making a new server.pem, all good.</P> Sun, 22 May 2016 22:51:42 GMT https://community.splunk.com/t5/Security/Trying-to-run-the-Distributed-Management-Console-getting-quot/m-p/260419#M7151 howyagoin 2016-05-22T22:51:42Z