<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Problem replicating config (bundle) to search peer in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516759#M145260</link>
    <description>&lt;P&gt;Did this happened regularly?&lt;BR /&gt;&lt;STRONG&gt;Yes&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Which kind of environment you have?&lt;BR /&gt;&lt;BR /&gt;2 Search Head&lt;BR /&gt;2 Indexers&lt;BR /&gt;2 Heavy Forwarder&lt;/P&gt;&lt;P&gt;I have access to the monitor, but there are several menus and submenu, which option should I check exactly?&lt;/P&gt;&lt;P&gt;Just as I investigated the problem is presented because the file called bundle is very heavy which causes the error message, my question at this time is if this bundle file can be debugged?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;DIV class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 28 Aug 2020 16:07:08 GMT</pubDate>
    <dc:creator>splunkcol</dc:creator>
    <dc:date>2020-08-28T16:07:08Z</dc:date>
    <item>
      <title>Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/514202#M144319</link>
      <description>&lt;P&gt;hi&lt;/P&gt;&lt;P&gt;can someone help me with this error message?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Sin título.jpg" style="width: 364px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/10266i3E4C381C9945A98D/image-size/large?v=v2&amp;amp;px=999" role="button" title="Sin título.jpg" alt="Sin título.jpg" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;will it be because of this file and its size? can i delete it?&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screenshot_3.png" style="width: 449px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/10267iDDE886AFA84FAFF7/image-size/large?v=v2&amp;amp;px=999" role="button" title="Screenshot_3.png" alt="Screenshot_3.png" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 14 Aug 2020 21:15:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/514202#M144319</guid>
      <dc:creator>splunkcol</dc:creator>
      <dc:date>2020-08-14T21:15:57Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516752#M145255</link>
      <description>&lt;P&gt;Sorry for the insistence, could someone give me recommendations?&amp;nbsp;&lt;span class="lia-unicode-emoji" title=":loudly_crying_face:"&gt;😭&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 28 Aug 2020 15:39:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516752#M145255</guid>
      <dc:creator>splunkcol</dc:creator>
      <dc:date>2020-08-28T15:39:35Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516755#M145257</link>
      <description>&lt;P&gt;Did this happened regularly?&lt;/P&gt;&lt;P&gt;Which kind of environment you have?&lt;/P&gt;&lt;P&gt;Have you MC (monitoring console) in use so you could check what there happened.&lt;/P&gt;&lt;P&gt;r. Ismo&lt;/P&gt;</description>
      <pubDate>Fri, 28 Aug 2020 15:46:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516755#M145257</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2020-08-28T15:46:31Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516759#M145260</link>
      <description>&lt;P&gt;Did this happened regularly?&lt;BR /&gt;&lt;STRONG&gt;Yes&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Which kind of environment you have?&lt;BR /&gt;&lt;BR /&gt;2 Search Head&lt;BR /&gt;2 Indexers&lt;BR /&gt;2 Heavy Forwarder&lt;/P&gt;&lt;P&gt;I have access to the monitor, but there are several menus and submenu, which option should I check exactly?&lt;/P&gt;&lt;P&gt;Just as I investigated the problem is presented because the file called bundle is very heavy which causes the error message, my question at this time is if this bundle file can be debugged?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;DIV class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 28 Aug 2020 16:07:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516759#M145260</guid>
      <dc:creator>splunkcol</dc:creator>
      <dc:date>2020-08-28T16:07:08Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516856#M145291</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;maybe these previous answers can help you:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;A href="https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-quot-Problem-replicating-config-bundle-to-search/td-p/347121" target="_blank"&gt;https://community.splunk.com/t5/Getting-Data-In/How-to-resolve-quot-Problem-replicating-config-bundle-to-search/td-p/347121&lt;/A&gt;&lt;/LI&gt;&lt;LI&gt;&lt;A href="https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-error-quot-problem-replicating-config-bundle-to/td-p/256826" target="_blank"&gt;https://community.splunk.com/t5/Splunk-Search/Why-am-I-getting-error-quot-problem-replicating-config-bundle-to/td-p/256826&lt;/A&gt;&lt;/LI&gt;&lt;LI&gt;&lt;A href="https://community.splunk.com/t5/Archive/Problem-replicating-config-bundle-to-search-peer/td-p/237763" target="_blank"&gt;https://community.splunk.com/t5/Archive/Problem-replicating-config-bundle-to-search-peer/td-p/237763&lt;/A&gt;&lt;/LI&gt;&lt;LI&gt;&lt;A href="https://community.splunk.com/t5/Splunk-Search/Large-lookup-caused-the-bundle-replication-to-fail-What-are-my/td-p/194594" target="_blank"&gt;https://community.splunk.com/t5/Splunk-Search/Large-lookup-caused-the-bundle-replication-to-fail-What-are-my/td-p/194594&lt;/A&gt;&lt;/LI&gt;&lt;LI&gt;&lt;A href="https://community.splunk.com/t5/Deployment-Architecture/This-keeps-appearing-in-my-search-head-quot-Problem-Replicating/td-p/207946" target="_blank"&gt;https://community.splunk.com/t5/Deployment-Architecture/This-keeps-appearing-in-my-search-head-quot-Problem-Replicating/td-p/207946&lt;/A&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Basically this could means that you have e.g. massive csv lookup file which you are trying to use within yor search and timeouts rises due that.&lt;/P&gt;&lt;P&gt;r. Ismo&lt;/P&gt;</description>
      <pubDate>Sat, 29 Aug 2020 12:46:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516856#M145291</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2020-08-29T12:46:58Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516866#M145294</link>
      <description>&lt;P&gt;replicating 265 MB should not be a problem.&amp;nbsp;&lt;/P&gt;&lt;P&gt;can you check the connectivity of search peer in search head, settings -&amp;gt; Distributed search -&amp;gt; search peers.&lt;/P&gt;&lt;P&gt;is status healthy?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 29 Aug 2020 16:11:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516866#M145294</guid>
      <dc:creator>thambisetty</dc:creator>
      <dc:date>2020-08-29T16:11:42Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516870#M145297</link>
      <description>&lt;P&gt;hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/214410"&gt;@isoutamo&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I will read each thread and inform you.&lt;/P&gt;&lt;P&gt;Thank you&lt;/P&gt;</description>
      <pubDate>Sat, 29 Aug 2020 17:06:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516870#M145297</guid>
      <dc:creator>splunkcol</dc:creator>
      <dc:date>2020-08-29T17:06:12Z</dc:date>
    </item>
    <item>
      <title>Re: Problem replicating config (bundle) to search peer</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516873#M145298</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;It is fine but I have seen it several times in "failed" state&lt;/P&gt;&lt;P&gt;It's even intermittent between "Successful" and "failed"&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="splunkcol_0-1598720885025.png" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/10565i01D4C7AABBCCC13F/image-size/large?v=v2&amp;amp;px=999" role="button" title="splunkcol_0-1598720885025.png" alt="splunkcol_0-1598720885025.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/129407"&gt;@thambisetty&lt;/a&gt;&amp;nbsp;&amp;nbsp;what do you think is the cause?&lt;/P&gt;</description>
      <pubDate>Sat, 29 Aug 2020 17:22:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Problem-replicating-config-bundle-to-search-peer/m-p/516873#M145298</guid>
      <dc:creator>splunkcol</dc:creator>
      <dc:date>2020-08-29T17:22:42Z</dc:date>
    </item>
  </channel>
</rss>

