topic Re: Running splunk diag gets stuck at "Getting index listings..." in Getting Data In

Running splunk diag gets stuck at "Getting index listings..."

andrei_radu — Tue, 09 May 2017 08:16:38 GMT

Hi,

I am trying to create a diag file on one of my indexers and the process is stuck at "Getting index listings..." for more than 1 hour.

Has anyone came across something similar and have a suggestion how to troubleshoot?

Regards!

Re: Running splunk diag gets stuck at "Getting index listings..."

dineshraj9 — Tue, 09 May 2017 09:31:37 GMT

Sometimes diag files can really consume a lot of space. You can filter out some of the contents like this -

./splunk diag --exclude */.snapshot/* --exclude */dispatch/* --exclude */search_pool/etc/users/* --exclude *.tgz* --exclude *.tar* --exclude *.gz* --exclude *.zip* --exclude *.png --exclude *.jpg --exclude *.jpeg --exclude *.gif --exclude *.so* --exclude *.old.* --exclude *.csv.* --exclude *.bundle*

Re: Running splunk diag gets stuck at "Getting index listings..."

andrei_radu — Thu, 11 May 2017 13:55:29 GMT

Thanks, excluding some parts of the diag file worked.