topic Re: CMSlave - Error deserializing notify in Deployment Architecture

CMSlave - Error deserializing notify

lukasz92 — Mon, 04 Jul 2016 13:47:38 GMT

I have many entries like this:

WARN CMSlave - event=handleNotifySummaries error deserializing notify file=/raid/splunk/var/lib/splunk/websphere/datamodel_summary/notify/notify.1_7B6E7EF6-00F8-45EC-876E-4E57B8B867C3.08E505C1-07CE-4046-820E-A8FCD7CEA32C_DM_(...).MSExchange err=invalid notify summary file=notify.1_7B6E7EF6-00F8-45EC-876E-4E57B8B867C3.08E505C1-07CE-4046-820E-A8FCD7CEA32C_DM_(...).MSExchange

What does it mean?

I have 2 indexers on site1 and 2 on site2; all connected to Cluster Master.

Re: CMSlave - Error deserializing notify

woodcock — Mon, 04 Jul 2016 15:53:48 GMT

Open a support case.

Re: CMSlave - Error deserializing notify

maraman_splunk — Tue, 12 Jul 2016 15:10:02 GMT

Hmm, same kind of warning here.
Don't know if there's any impact
splunk 6.4.1, linux redhat 6.8 64bit, ext4
I've got 4 new indexers in CM, all have the same warnings...

Re: CMSlave - Error deserializing notify

dxu_splunk — Tue, 12 Jul 2016 19:06:45 GMT

This can be safely ignored as long as you're not using summary replication. (If using summary replication, these summaries will not be replicated amongst the cluster, and a workaround would be to rename the DataModel/ReportAcceleration to remove any "." in the name)

Re: CMSlave - Error deserializing notify

koshyk — Sun, 04 Sep 2016 09:18:55 GMT

same error here. Need to be fix from splunk

Re: CMSlave - Error deserializing notify

dxu_splunk — Wed, 07 Sep 2016 01:02:44 GMT

its been fixed in 6.4.3