topic Help! Summary search process stuck ? in Splunk Search

Help! Summary search process stuck ?

the_wolverine — Fri, 10 Dec 2010 09:08:53 GMT

I started running the fill_summary_index.py script and my session was interrupted. The summary backfill process never completed and I'm unable to restart it. I've tried restarting Splunk but it still thinks that a fill_summary_index instance is still running:

# ./splunk cmd python fill_summary_index.py 
Please enter the app that contains the search(es): search
An instance of fill_summary_index is already running for app=search

What can I do to cancel it and restart it?

Re: Help! Summary search process stuck ?

the_wolverine — Fri, 10 Dec 2010 14:14:26 GMT

Per Splunk Support, there's a fsidx*.lock file in the app directory that the script was run against. In my case, the search app:

/opt/splunk/etc/apps/search/log]# ls fsidxrlKD2v.lock

After deleting the lock file I was able to relaunch the summary backfill script.

Re: Help! Summary search process stuck ?

the_wolverine — Fri, 10 Dec 2010 14:14:42 GMT

Thanks, Alex 😉

Re: Help! Summary search process stuck ?

araitz — Fri, 10 Dec 2010 14:54:38 GMT

http://www.splunk.com/base/Documentation/4.1.6/Knowledge/Managesummaryindexgapsandoverlaps#what_to_do_if_fill_summary_index.py_is_interrupted_while_running