Deployment Architecture

Not able to create new index in standalone instance of Splunk indexer

rupeshn
Explorer

Hi All, I've created new app with all the indexes required and have added all the stanzas for parameters.Restarted the Splunk on Indexer. Now when i login all is good. The indexes are reflected in GUI and logs are ingesting. But when i try to create new index. It is throwing e a below error.

stanza=alm_win_allservers parameter=frozenTimePeriodInSecs Value supplied='12096000‬' is illegal; default='188697600' Could you please help here

Labels (1)
Tags (2)
0 Karma
1 Solution

anilchaithu
Builder

@rupeshn 

looks like the stanza is not thinking this as an integer. Did you copy this value from elsewhere? try to enter the value manually and check.

View solution in original post

anilchaithu
Builder

@rupeshn 

looks like the stanza is not thinking this as an integer. Did you copy this value from elsewhere? try to enter the value manually and check.

rupeshn
Explorer

Sorry! I did not get time to check on this. Today i checked it and it worked fine.

 

Thank You!

0 Karma
Get Updates on the Splunk Community!

Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today

Meet Carol Wright. She leads the Splunk Academic Alliance program at Splunk. The Splunk Academic Alliance ...

Part 2: A Guide to Maximizing Splunk IT Service Intelligence

Welcome to the second segment of our guide. In Part 1, we covered the essentials of getting started with ITSI ...

Part 1: A Guide to Maximizing Splunk IT Service Intelligence

As modern IT environments continue to grow in complexity and speed, the ability to efficiently manage and ...