https://community.splunk.com/t5/Deployment-Architecture/Search-head-pooling-error/m-p/65099#M2231 <P>According to Splunk support this is a bug with the version I'm using. The solution is to leave the trailing slash off the NFS path. e.g.</P> <P>/opt/splunk/bin/splunk pooling enable /splunkconfig/pooledheads --debug</P> Fri, 25 Mar 2011 20:06:19 GMT nocostk 2011-03-25T20:06:19Z https://community.splunk.com/t5/Deployment-Architecture/Search-head-pooling-error/m-p/65098#M2230 <P>I'm trying to setup search head pooling. I've followed the directions listed <A href="http://www.splunk.com/base/Documentation/4.2/Deploy/Configuresearchheadpooling" rel="nofollow">here</A></P> <P>But when I startup splunkd I get an error. Here is the stack trace:</P> <PRE><CODE>2011-03-22 12:28:43,565 ERROR [4d88ea5b361b339410] root:491 - Unable to start splunkweb 2011-03-22 12:28:43,565 ERROR [4d88ea5b361b339410] root:492 - Illegal escape from parent directory "/splunkconfig/pooledheads/": /splunkconfig/pooledheads/etc/apps Traceback (most recent call last): File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/root.py", line 487, in &lt;module&gt; run(blocking=True) File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/root.py", line 324, in run mount_static(ctrl, global_cfg, cfg) File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/root.py", line 161, in mount_static static_app_dir= make_absolute('etc/apps', '') File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/util.py", line 194, in make_absolute fullpath = make_splunkhome_path_helper(fragment) File "/opt/splunk/lib/python2.6/site-packages/splunk/appserver/mrsparkle/lib/util.py", line 384, in make_splunkhome_path_helper (basepath, fullpath)) ValueError: Illegal escape from parent directory "/splunkconfig/pooledheads/": /splunkconfig/pooledheads/etc/apps </CODE></PRE> <P>I configured pooling with this command:</P> <PRE><CODE>/opt/splunk/bin/splunk pooling enable /splunkconfig/pooledheads/ --debug </CODE></PRE> <P>Any ideas?</P> Wed, 23 Mar 2011 01:34:11 GMT https://community.splunk.com/t5/Deployment-Architecture/Search-head-pooling-error/m-p/65098#M2230 nocostk 2011-03-23T01:34:11Z https://community.splunk.com/t5/Deployment-Architecture/Search-head-pooling-error/m-p/65099#M2231 <P>According to Splunk support this is a bug with the version I'm using. The solution is to leave the trailing slash off the NFS path. e.g.</P> <P>/opt/splunk/bin/splunk pooling enable /splunkconfig/pooledheads --debug</P> Fri, 25 Mar 2011 20:06:19 GMT https://community.splunk.com/t5/Deployment-Architecture/Search-head-pooling-error/m-p/65099#M2231 nocostk 2011-03-25T20:06:19Z