Getting Data In

ERROR SQLitePersistentStorageImpl - on Indexer, every minute

gcollini
New Member

Hello,

On my primary Indexer (~10GB / Day) I got the following errors, almost exactly every minute:

10-05-2011 07:21:49.539 -0400 ERROR FSChangeMonitor - Exception thrown in update(2) - continuing

10-05-2011 07:21:49.539 -0400 ERROR SQLitePersistentStorageImpl - Error executing: select primarykey, value from keyvaluepairs_t where secondary1 = ?1 Msg=database is locked

Any idea?

Tags (3)
0 Karma

gcollini
New Member

Restarted multiple time, I believe I got only 1 instance running (2 processes)

0 Karma

jbsplunk
Splunk Employee
Splunk Employee

It looks like there is a lock on the database. Did you try to restart your splunk instance? Is it possible that you've got another sql lite tool accessing these files?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...