Deployment Architecture

Not able to create new index in standalone instance of Splunk indexer

rupeshn
Explorer

Hi All, I've created new app with all the indexes required and have added all the stanzas for parameters.Restarted the Splunk on Indexer. Now when i login all is good. The indexes are reflected in GUI and logs are ingesting. But when i try to create new index. It is throwing e a below error.

stanza=alm_win_allservers parameter=frozenTimePeriodInSecs Value supplied='12096000‬' is illegal; default='188697600' Could you please help here

Tags (2)
0 Karma
1 Solution

anilchaithu
Builder

@rupeshn 

looks like the stanza is not thinking this as an integer. Did you copy this value from elsewhere? try to enter the value manually and check.

View solution in original post

anilchaithu
Builder

@rupeshn 

looks like the stanza is not thinking this as an integer. Did you copy this value from elsewhere? try to enter the value manually and check.

rupeshn
Explorer

Sorry! I did not get time to check on this. Today i checked it and it worked fine.

 

Thank You!

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...