Dashboards & Visualizations

Why am I getting this dashboard error daily? "Search peer xxxxidx01 has the following message: Splunk must be restarted for changes to take effect."

splunkdeploy
New Member

Hi,

I get this error daily in my Splunk dashboard.

Error: "Search peer xxxxidx01 has the following message: Splunk must be restarted for changes to take effect."

If i restart splunk, it will be fine, but I noticed I am getting this frequently. Hence, I decided to reboot my idx VM. Once the reboot is done, the error is gone, but I get bad luck after some time and the same error occurs.

What is the issue here? In which config file I can check regarding this?

Please suggest me one permanent solution for this.

Regards,
Unni TN

0 Karma

masonmorales
Influencer

You could use the Splunk on Splunk app to look through ERRORs and WARNs in your Splunk environment to see if something is prompting a reboot. You may wish to contact Splunk Support to help diagnose the issue though.

0 Karma

splunksurekha
Path Finder

Hi,

checked under ERRORS and WARNs for that particular indexer and nothing is prompting for a reboot.
Is there a specific error which i can search for in splunkd.log or or some other log file.
Please give us some solution as we are facing this almost every day and not able to get rid of this error.

Thanks
Surekha

0 Karma

splunksurekha
Path Finder

Hi,

This is with regards to the request from Unni.

We have installed sos and looked through the errors and warns but couldn't find anything related to reboot or restart of the server.
Can you tell me what exact error i should look for.

Thanks
Surekha.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...