topic Re: Comprehensive documentation about troubleshooting in Splunk Enterprise

Comprehensive documentation about troubleshooting

dspencer — Tue, 26 Aug 2025 18:42:04 GMT

Is there a comprehensive resource describes the data rebalancing process and troubleshooting steps in detail if splunk happens to stall?

Re: Comprehensive documentation about troubleshooting

livehybrid — Tue, 26 Aug 2025 19:22:52 GMT

Hi @dspencer

I think this will probably be the best starting point: https://help.splunk.com/en/splunk-enterprise/administer/manage-indexers-and-indexer-clusters/9.4/manage-the-indexer-cluster/rebalance-the-indexer-cluster which as details on how to check the status etc. Ultimately a solution for any issues will depend on the problem you face.

Have you tried to carry out a rebalance and failed or just thinking hypothetically?

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Comprehensive documentation about troubleshooting

dspencer — Tue, 26 Aug 2025 19:53:23 GMT

I ran a full rebalance, non-searchable, threshold = 95% over the weekend and it seemed to get stuck at 99.72% before i stopped it. Splunk documentation isn't comprehensive enough for troubleshooting purposes and some of the post I've found don't explain anything. I need references that will help me determine what the issue is.