https://community.splunk.com/t5/Getting-Data-In/rawdata-error/m-p/95645#M97445 <P>What order did you process the upgrade in? Did you go directly from 4.0 to 4.3?</P> <P>I don't think its anything to worry about, FSCK doesn't support buckets created in pre.. 4.1 or 4.2 ? one of those anyway. So it is fairly normal to see that message, it could also be indicative of an upgrade from 4.0 direct to 4.3.</P> Wed, 11 Jul 2012 11:49:41 GMT Drainy 2012-07-11T11:49:41Z https://community.splunk.com/t5/Getting-Data-In/rawdata-error/m-p/95644#M97444 <P>I upgraded splunk from 4.0.3 to 4.3.3, After upgrade, i started the splunkd service and could found error in splunkd.log file. </P> <OL> <LI>07-11-2012 14:57:46.952 +0530 ERROR ProcessTracker - (child_2__Fsck) BucketBuilder - The rawdata version in directory "/opt/splunk/var/lib/splunk/audit/db/db_1339419362_1339419301_19/rawdata" does not support rebuilding</LI> </OL> <P>Can someone give suggestion/solution to resolve the problem?</P> Mon, 28 Sep 2020 12:03:38 GMT https://community.splunk.com/t5/Getting-Data-In/rawdata-error/m-p/95644#M97444 selvarn 2020-09-28T12:03:38Z https://community.splunk.com/t5/Getting-Data-In/rawdata-error/m-p/95645#M97445 <P>What order did you process the upgrade in? Did you go directly from 4.0 to 4.3?</P> <P>I don't think its anything to worry about, FSCK doesn't support buckets created in pre.. 4.1 or 4.2 ? one of those anyway. So it is fairly normal to see that message, it could also be indicative of an upgrade from 4.0 direct to 4.3.</P> Wed, 11 Jul 2012 11:49:41 GMT https://community.splunk.com/t5/Getting-Data-In/rawdata-error/m-p/95645#M97445 Drainy 2012-07-11T11:49:41Z