Deployment Architecture

cannot apply cluster-bundle

splunker24
Explorer

Hello,

I have installed a cluster (repfactor=2) and I am trying to push aout a very simple indexes.conf placed under $SPLUNK_HOME/etc/master-apps/local.

Everyt time I run splunk apply cluster-bundle I get this answer:

In handler 'clustermastercontrol': Cannot apply configuration settings. Bundle validation is in progress.

This hangs on for a long time and my indexes.conf holds only one line:

frozenTimePeriodInSecs = 50000000

Can you please help me?

cam343
Path Finder

maybe check my answer here (considering this page is the top hit in google): http://answers.splunk.com/answers/151938/why-is-cluster-master-stuck-at-bundle-validation-is-in-prog...

0 Karma

pshah_splunk
Splunk Employee
Splunk Employee

In case the restart doesn't work, just trying making a small change to the $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf file (like adding a comment), and try to push the bundle again

0 Karma

jkerai
Splunk Employee
Splunk Employee

Are you still experiencing the issue? Can you restart master and give it a try again. Seems like master is confused for whatever reason.

0 Karma

splunk68
Path Finder

Are your indexers running under Windows ? What is the output from "splunk show cluster-bundle-status"

0 Karma

splunker24
Explorer

Sorry, I mistyped, indexes.conf is placed here:

$SPLUNK_HOME/etc/master-apps/_cluster/local

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...