https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-windows-cluster-peer-node-continually-restarting/m-p/85769#M3104 <P>I've set up a new windows cluster, but one of my nodes seems to be in a continual restart. When I looked in splunkd.log, I found the following messages near each restart:</P> <PRE><CODE> 04-03-2013 08:43:37.608 +0200 INFO CMSlave - successfully moved bundle from 'C:\Program Files\Splunk\var\run\splunk\cluster\remote-bundle\b080fa58dab1dff841b292814b7f6c5e-1364971417' to 'C:\Program Files\Splunk\etc\slave-apps' 04-03-2013 08:43:37.608 +0200 INFO loader - Downloaded new bundle from the cluster master. Restarting splunkd... </CODE></PRE> <P>I've noticed that the slave-apps folder, where the configuration is supposed to end up, is empty. Has anyone seen this, and if so, how can I resolve the problem?</P> Fri, 05 Apr 2013 10:08:40 GMT jdastmalchi_spl 2013-04-05T10:08:40Z https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-windows-cluster-peer-node-continually-restarting/m-p/85769#M3104 <P>I've set up a new windows cluster, but one of my nodes seems to be in a continual restart. When I looked in splunkd.log, I found the following messages near each restart:</P> <PRE><CODE> 04-03-2013 08:43:37.608 +0200 INFO CMSlave - successfully moved bundle from 'C:\Program Files\Splunk\var\run\splunk\cluster\remote-bundle\b080fa58dab1dff841b292814b7f6c5e-1364971417' to 'C:\Program Files\Splunk\etc\slave-apps' 04-03-2013 08:43:37.608 +0200 INFO loader - Downloaded new bundle from the cluster master. Restarting splunkd... </CODE></PRE> <P>I've noticed that the slave-apps folder, where the configuration is supposed to end up, is empty. Has anyone seen this, and if so, how can I resolve the problem?</P> Fri, 05 Apr 2013 10:08:40 GMT https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-windows-cluster-peer-node-continually-restarting/m-p/85769#M3104 jdastmalchi_spl 2013-04-05T10:08:40Z https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-windows-cluster-peer-node-continually-restarting/m-p/85770#M3105 <P>We've seen the splunk service account lose full permissions over the slave-apps directory on windows. Restoring those permissions stopped the restarting loop. The permissions showed "special" for the splunk service account and the Administrators group. Restoring the full permissions resolve the issue for us. </P> Fri, 05 Apr 2013 10:13:36 GMT https://community.splunk.com/t5/Deployment-Architecture/Why-is-my-windows-cluster-peer-node-continually-restarting/m-p/85770#M3105 jbsplunk 2013-04-05T10:13:36Z