Deployment Architecture

cannot apply cluster-bundle

splunker24
Explorer

Hello,

I have installed a cluster (repfactor=2) and I am trying to push aout a very simple indexes.conf placed under $SPLUNK_HOME/etc/master-apps/local.

Everyt time I run splunk apply cluster-bundle I get this answer:

In handler 'clustermastercontrol': Cannot apply configuration settings. Bundle validation is in progress.

This hangs on for a long time and my indexes.conf holds only one line:

frozenTimePeriodInSecs = 50000000

Can you please help me?

cam343
Path Finder

maybe check my answer here (considering this page is the top hit in google): http://answers.splunk.com/answers/151938/why-is-cluster-master-stuck-at-bundle-validation-is-in-prog...

0 Karma

pshah_splunk
Splunk Employee
Splunk Employee

In case the restart doesn't work, just trying making a small change to the $SPLUNK_HOME/etc/master-apps/_cluster/local/indexes.conf file (like adding a comment), and try to push the bundle again

0 Karma

jkerai
Splunk Employee
Splunk Employee

Are you still experiencing the issue? Can you restart master and give it a try again. Seems like master is confused for whatever reason.

0 Karma

splunk68
Path Finder

Are your indexers running under Windows ? What is the output from "splunk show cluster-bundle-status"

0 Karma

splunker24
Explorer

Sorry, I mistyped, indexes.conf is placed here:

$SPLUNK_HOME/etc/master-apps/_cluster/local

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...