topic Re: How do I fix KVStore error in indexer cluster in Monitoring Splunk

How do I fix KVStore error in indexer cluster

emallinger — Fri, 23 Jul 2021 08:14:58 GMT

Hello,

I used :

|rest /services/server/info|table host kvStoreStatus

to check kvstore status after upgrading splunk from 8.0.4.1 to 8.1.3.

Results are coherent with messages for SHC. It's taken care of.

But for my indexers (in a cluster), the value is either "ready" or "failed".

I'm not sure I understand what either really mean. And no clue as how to fix it, as my understanding is that the usual command for that are for search-heads.

Does this mean I can apply the same procedure as :

https://docs.splunk.com/Documentation/Splunk/8.2.1/Admin/ResyncKVstore

Thanks

Regards,

Ema

Re: How do I fix KVStore error in indexer cluster

venkatasri — Fri, 23 Jul 2021 10:55:11 GMT

Hi @emallinger

There is a lot to explain, why don't you look at already answered query here - https://community.splunk.com/t5/Getting-Data-In/Where-should-the-kvstore-be-deployed-in-a-distributed-Splunk/m-p/353968

---

An upvote would be appreciated if this reply helps!

Re: How do I fix KVStore error in indexer cluster

emallinger — Fri, 23 Jul 2021 13:16:47 GMT

Hello,

Thanks , that was exactly what I was looking for !

It pertains to what I understood but wasn't sure enough of.

Regards,

Ema