<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic bundle replication taking too long in Deployment Architecture</title>
    <link>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86804#M3167</link>
    <description>&lt;P&gt;I have messages like the one below on a regular basis on my deployment server.  Is there any way to determine what bundle is taking too long to replicate?  Are there any other searches that will help me to determine which bundle to investigate?&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;10-05-2011 08:32:26.359 -0400 WARN  DistributedBundleReplicationManager - bundle replication to 5 peer(s) took too long (18482ms), bundle file size=29110KB, replication_id=1317817927&lt;/CODE&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 05 Oct 2011 12:53:22 GMT</pubDate>
    <dc:creator>EricPartington</dc:creator>
    <dc:date>2011-10-05T12:53:22Z</dc:date>
    <item>
      <title>bundle replication taking too long</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86804#M3167</link>
      <description>&lt;P&gt;I have messages like the one below on a regular basis on my deployment server.  Is there any way to determine what bundle is taking too long to replicate?  Are there any other searches that will help me to determine which bundle to investigate?&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;10-05-2011 08:32:26.359 -0400 WARN  DistributedBundleReplicationManager - bundle replication to 5 peer(s) took too long (18482ms), bundle file size=29110KB, replication_id=1317817927&lt;/CODE&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 05 Oct 2011 12:53:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86804#M3167</guid>
      <dc:creator>EricPartington</dc:creator>
      <dc:date>2011-10-05T12:53:22Z</dc:date>
    </item>
    <item>
      <title>Re: bundle replication taking too long</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86805#M3168</link>
      <description>&lt;P&gt;Well, as of 4.1 and 4.2, there's only one bundle, and it's basically the entire contents of etc/apps, etc/system, and etc/users (with a limited set of exceptions). So pretty much, if you have something large anywhere in those locations (and I suspect it's a large lookup file) that's the cause. &lt;/P&gt;

&lt;P&gt;To deal with this, you can either use network-mounted bundles (and disable replication), or see if asynchronous replication works for you. Both of these config options are available in 4.2 and up.&lt;/P&gt;</description>
      <pubDate>Wed, 05 Oct 2011 17:02:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86805#M3168</guid>
      <dc:creator>gkanapathy</dc:creator>
      <dc:date>2011-10-05T17:02:53Z</dc:date>
    </item>
    <item>
      <title>Re: bundle replication taking too long</title>
      <link>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86806#M3169</link>
      <description>&lt;P&gt;noticed that splunk app for windows had one such very large lookup files&lt;/P&gt;</description>
      <pubDate>Thu, 15 May 2014 21:53:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Deployment-Architecture/bundle-replication-taking-too-long/m-p/86806#M3169</guid>
      <dc:creator>dstaulcu</dc:creator>
      <dc:date>2014-05-15T21:53:30Z</dc:date>
    </item>
  </channel>
</rss>

