Archive
Highlighted

Why does the Hunk search.log contain many of these "INFO UserManager...user context" messages?

Splunk Employee
Splunk Employee

We have recently configured HUNK to search our Cloudera cluster. The search appeared to be successful.
However, I would like to know what are the abundance of these events in the search.log. Are they expected?

06-18-2015 14:14:56.735 INFO UserManager - Unwound user context: splunk-system-user -> NULL
06-18-2015 14:14:56.735 INFO UserManager - Setting user context: splunk-system-user
06-18-2015 14:14:56.735 INFO UserManager - Done setting user context: NULL -> splunk-system-user
06-18-2015 14:14:56.735 INFO UserManager - Unwound user context: splunk-system-user -> NULL
06-18-2015 14:14:56.736 INFO UserManager - Setting user context: splunk-system-user
06-18-2015 14:14:56.736 INFO UserManager - Done setting user context: NULL -> splunk-system-user
Tags (2)
0 Karma
Highlighted

Re: Why does the Hunk search.log contain many of these "INFO UserManager...user context" messages?

Splunk Employee
Splunk Employee

Those messages are expected, and nothing to worry about. They indicate that Hunk is performing actions using different user contexts.