Deployment Architecture

Cannot replicate remote storage enabled warm bucket

John_Littleton
Explorer

8.2.5 Enterprise 

_internal index has 5 buckets with this error:

ClusterSlaveBucketHandler [xxxxxx TcpChannelThread] - Failed to trigger replication (err='Cannot replicate remote storage enabled warm bucket, bid=_internal~xx~xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx until it's uploaded

Restarting the CM dropped the bucket in fixup from 25 to 5, but these 5 remain.

Anyone facing this or have any resolution tips?

Thanks!

Labels (1)
Tags (2)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @John_Littleton,

being production data, I hint to open a case to Splunk Support.

Ciao.

Giuseppe

View solution in original post

John_Littleton
Explorer

Thank you @gcusello and sorry for the delayed acceptance. FYI for anyone looking for the specific solution, it was a known 8.2.6 issue

https://docs.splunk.com/Documentation/Splunk/8.2.6/ReleaseNotes/Knownissues
SPL-200532

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @John_Littleton,

being production data, I hint to open a case to Splunk Support.

Ciao.

Giuseppe

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...