Deployment Architecture

Why does the cluster master throw error "Archiver failure - Failed to create archive file" on cluster-bundle push?

ejharts2015
Communicator

Oftentimes when we go to deploy our configs to our clustered indexers (Splunk 6.3.0) using:

sudo -H -u splunk /opt/splunk/bin/splunk apply cluster-bundle

It fails with the following error:

Encountered some errors while applying the bundle.

 In handler 'clustermastercontrol': The Master could not push the latest configuration bundle because it contains an invalid configuration. Fix any errors and push the bundle again. Alternatively, you can skip the validation process like this: "splunk apply cluster-bundle --skip-validation". Use this option carefully, as it can cause the master to push an invalid configuration to the peers. The following errors were encountered: 
Archiver failure - Failed to create archive file.

Any ideas how to fix or what this means? Can't seem to find others with this issue.

0 Karma
1 Solution

ejharts2015
Communicator

Finally figured this one out. Turns out the permissions were invalid on the file we had just created (they were created/owned by root). To fix we ran a:

sudo chown -R splunk:splunk /opt/splunk/etc/...file.conf

Then repushed the bundle. And it worked.

The other time we had this issue, someone else had one of the conf files open in vim (which automatically creates a .swp file) which prevented the push.

View solution in original post

ejharts2015
Communicator

Finally figured this one out. Turns out the permissions were invalid on the file we had just created (they were created/owned by root). To fix we ran a:

sudo chown -R splunk:splunk /opt/splunk/etc/...file.conf

Then repushed the bundle. And it worked.

The other time we had this issue, someone else had one of the conf files open in vim (which automatically creates a .swp file) which prevented the push.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...