topic Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'? in Knowledge Management

Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

pedromvieira — Mon, 28 Sep 2020 18:36:55 GMT

Hello,

After a while, my KV Store isnt working.

I receive this message:

The lookup table 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed. Please contact your system administrator.' is invalid.

Nothings shows wrong when I restart Splunk or in _internal logs.

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

pedromvieira — Fri, 09 Jan 2015 22:27:42 GMT

After manually restarting mongod service, it worked.

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

cafissimo — Mon, 09 Feb 2015 14:12:45 GMT

Please, How did you restarted mongod service? Are you running splunk on windows or Linux

Thanks

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

kundeng — Thu, 26 Mar 2015 19:11:52 GMT

I tried to restart mongod on linux, but it requires some ssl lib file under splunk/lib.

Anyone has tried and successfully restarted mongod service?

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

cedarcrestone — Mon, 13 Apr 2015 13:34:09 GMT

I am experiencing the same issue. Any lucks on the command for Linux?

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

ashnet16 — Mon, 20 Apr 2015 15:20:01 GMT

How did you perform your mongod service restart? Thanks.

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

bravon — Mon, 20 Apr 2015 16:33:58 GMT

For me the solution was (and still is) to deleted the mongod.lock file and do a "Splunk restart"

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

peteharverson — Mon, 22 Jun 2015 10:22:21 GMT

I just experienced the same issue - Splunk 6.2.3 running on Linux. As well as deleting mongod.lock, I also had to delete splunk.key, both under $SPLUNK_HOME/var/lib/splunk/kvstore/mongo, before doing a splunk restart.

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

jkellerman_splu — Tue, 30 Jun 2015 07:32:59 GMT

Hi, I had the exact same behaviour but in my case the root cause was a firewall between the search head cluster peers that did not allow communication on kvstore replication port (default 8191)

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

pasokkum — Wed, 25 May 2016 12:49:57 GMT

I have tried this option also but th issue has not resolved. Is there any alternative

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

woodcock — Sat, 28 Jul 2018 02:37:16 GMT

In my case it was that the certificates and other files were too permissive. I did this to fix it:

cd /opt/splunk/var/lib/splunk/kvstore/mongo
chmod 600 *
/opt/splunk/bin/splunk restart

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store initialization has failed'?

woodcock — Sat, 28 Jul 2018 02:37:22 GMT

In my case it was that the certificates and other files were too permissive. I did this to fix it:

cd /opt/splunk/var/lib/splunk/kvstore/mongo
chmod 600 *
/opt/splunk/bin/splunk restart

Re: Why am I getting KV store error 'External command based lookup 'MY_KV_LOOKUP' is not available because KV Store init

giorgio79dis — Wed, 21 Apr 2021 18:08:40 GMT

Thank you! Your solution worked