https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192675#M12420 <P>I would like to know when a web:ui user get a bundle replication error. does anyone know where can I look to setup an alert so that I get an email every time this error is shown to the users?</P> Mon, 09 Jun 2014 15:29:14 GMT hartfoml 2014-06-09T15:29:14Z https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192675#M12420 <P>I would like to know when a web:ui user get a bundle replication error. does anyone know where can I look to setup an alert so that I get an email every time this error is shown to the users?</P> Mon, 09 Jun 2014 15:29:14 GMT https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192675#M12420 hartfoml 2014-06-09T15:29:14Z https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192676#M12421 <P>You can find these events in the _internal index.</P> Mon, 09 Jun 2014 15:59:48 GMT https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192676#M12421 rtadams89 2014-06-09T15:59:48Z https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192677#M12422 <P>ya thanks, Thanks was the first place I looked but could not find them in there. Thanks anyway.</P> Mon, 09 Jun 2014 16:53:18 GMT https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192677#M12422 hartfoml 2014-06-09T16:53:18Z https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192678#M12423 <P>Try searching for:</P> <P>index=_internal component=DistributedPeerManager</P> <P>This should show you all the bundle replication events. You can further refine this to:</P> <P>index=_internal component=DistributedPeerManager "replication was unsuccessful" </P> <P>Which will show you the failures.</P> Mon, 09 Jun 2014 17:13:25 GMT https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192678#M12423 rtadams89 2014-06-09T17:13:25Z https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192679#M12424 <P>Sorry I am on version 4.3.1 and these logs are not recorded in any index that I can find.</P> Mon, 09 Jun 2014 18:31:59 GMT https://community.splunk.com/t5/Alerting/Alert-for-quot-Problem-replicating-config-bundle-quot/m-p/192679#M12424 hartfoml 2014-06-09T18:31:59Z