topic Re: splunk partition get corrupted on indexer in Getting Data In

splunk partition get corrupted on indexer

rashid47010 — Thu, 27 Jun 2019 08:22:14 GMT

we have distributed clustered environment. on DR site one of the server get crashed and not rebooting. if we deattach /opt/splunk LVM then server reboots properly. OS admin is saying that the /opt/SpluK VM crashed.

Re: splunk partition get corrupted on indexer

DavidHourani — Thu, 27 Jun 2019 09:01:08 GMT

Hi @rashid47010,

Check with your linux admin to see if you can get this fixed. If you can't, then contact professional services and see if it's possible to rebuild the partition or the server that's having the issue.

Cheers,
David

Re: splunk partition get corrupted on indexer

rashid47010 — Thu, 27 Jun 2019 10:48:22 GMT

we create new partition(LVM) as it is not recoverable. On new partition we install splunk package( same version that we have on other splunk instances). then follow the same guide provided by splunk consultant to back into Operations.

Thanks david.