<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Why is my search head cluster captain logging KV Store replication errors? in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337023#M12609</link>
    <description>&lt;P&gt;A slightly safer way to do this is just transfer the captaincy to another member of the cluster so that it rebuilds the replicaSet configuration for mongod. No stops or cleans required.&lt;/P&gt;

&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Transfercaptain#Change_the_captain"&gt;https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Transfercaptain#Change_the_captain&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 31 Jan 2019 12:57:59 GMT</pubDate>
    <dc:creator>delink</dc:creator>
    <dc:date>2019-01-31T12:57:59Z</dc:date>
    <item>
      <title>Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337017#M12603</link>
      <description>&lt;P&gt;The log is repeating at sub-second intervals:&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;2017-10-27T20:44:53.389Z I REPL     [ReplicationExecutor] Error in heartbeat request to shccaptain:8191; InvalidReplicaSetConfig Our replica set configuration is invalid or does not include us&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;The kvstore appears to be healthy otherwise.&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;&amp;gt; curl -sku admin:password &lt;A href="https://shcmember:8089/services/server/info" target="test_blank"&gt;https://shcmember:8089/services/server/info&lt;/A&gt; | grep -i kv&lt;BR /&gt;
        &amp;lt;s:key name="kvStoreStatus"&amp;gt;ready&amp;lt;/s:key&amp;gt;&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;&amp;gt; curl -sku admin:password &lt;A href="https://shccaptain:8089/services/server/info" target="test_blank"&gt;https://shccaptain:8089/services/server/info&lt;/A&gt; | grep -i kv&lt;BR /&gt;
        &amp;lt;s:key name="kvStoreStatus"&amp;gt;ready&amp;lt;/s:key&amp;gt;&lt;/CODE&gt;&lt;/P&gt;

&lt;P&gt;What's the problem? What's the fix?&lt;/P&gt;

&lt;P&gt;EDIT: The error started after creating a collection by running this curl command:&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;curl -ku admin -d name=userid &lt;A href="https://shcmember:8089/servicesNS/nobody/alpha_search/storage/collections/config" target="test_blank"&gt;https://shcmember:8089/servicesNS/nobody/alpha_search/storage/collections/config&lt;/A&gt;&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 27 Oct 2017 20:48:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337017#M12603</guid>
      <dc:creator>twinspop</dc:creator>
      <dc:date>2017-10-27T20:48:30Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337018#M12604</link>
      <description>&lt;P&gt;HI &lt;BR /&gt;
can you share collection configuration?&lt;/P&gt;</description>
      <pubDate>Sun, 29 Oct 2017 10:39:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337018#M12604</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2017-10-29T10:39:08Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337019#M12605</link>
      <description>&lt;P&gt;The collection was configured as above. No other settings applied.  These are the defaults as far as I can tell:&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;&lt;BR /&gt;
[userid]&lt;BR /&gt;
profilingEnabled = false&lt;BR /&gt;
profilingThresholdMs = 1000&lt;BR /&gt;
replicate = false&lt;BR /&gt;
replication_dump_maximum_file_size = 10240&lt;BR /&gt;
replication_dump_strategy = auto&lt;BR /&gt;
type = undefined&lt;BR /&gt;
&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 30 Oct 2017 00:48:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337019#M12605</guid>
      <dc:creator>twinspop</dc:creator>
      <dc:date>2017-10-30T00:48:50Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337020#M12606</link>
      <description>&lt;P&gt;Hi &lt;/P&gt;

&lt;P&gt;Can you please try below stanza?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;[userid] 
replicate = true
enforceTypes = false
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I have removed other configuration bcoz those have assigned to default values.  Make sure about configuration would same in entire cluster.&lt;/P&gt;

&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 30 Oct 2017 05:27:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337020#M12606</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2017-10-30T05:27:25Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337021#M12607</link>
      <description>&lt;P&gt;I should say that i have many other collections running, with exactly the same creation procedure. None triggered this error repeating. That said, I added the configs you suggested above to this single collection via the REST API. Confirmed via btool. The errors continue.&lt;/P&gt;</description>
      <pubDate>Mon, 30 Oct 2017 15:50:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337021#M12607</guid>
      <dc:creator>twinspop</dc:creator>
      <dc:date>2017-10-30T15:50:29Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337022#M12608</link>
      <description>&lt;P&gt;Splunk Support provided this solution:&lt;/P&gt;

&lt;P&gt;on the SHC captain, &lt;CODE&gt;splunk stop&lt;/CODE&gt;, then &lt;CODE&gt;splunk clean kvstore --local&lt;/CODE&gt;, accept the scary warning message, and finally restart splunk. The errors have subsided and as far as I can tell, no damage was done.&lt;/P&gt;

&lt;P&gt;Hope this helps a future admin.&lt;/P&gt;</description>
      <pubDate>Wed, 08 Nov 2017 03:14:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337022#M12608</guid>
      <dc:creator>twinspop</dc:creator>
      <dc:date>2017-11-08T03:14:40Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337023#M12609</link>
      <description>&lt;P&gt;A slightly safer way to do this is just transfer the captaincy to another member of the cluster so that it rebuilds the replicaSet configuration for mongod. No stops or cleans required.&lt;/P&gt;

&lt;P&gt;&lt;A href="https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Transfercaptain#Change_the_captain"&gt;https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Transfercaptain#Change_the_captain&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 31 Jan 2019 12:57:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337023#M12609</guid>
      <dc:creator>delink</dc:creator>
      <dc:date>2019-01-31T12:57:59Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my search head cluster captain logging KV Store replication errors?</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337024#M12610</link>
      <description>&lt;P&gt;Thanks!&lt;BR /&gt;
Has the same problem today and changing the captain did not help. &lt;BR /&gt;
But running this on the problematic host, solved it.&lt;/P&gt;</description>
      <pubDate>Tue, 28 May 2019 17:05:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-search-head-cluster-captain-logging-KV-Store/m-p/337024#M12610</guid>
      <dc:creator>peter_krammer</dc:creator>
      <dc:date>2019-05-28T17:05:54Z</dc:date>
    </item>
  </channel>
</rss>

