Getting Data In

Upgraded universal forwarder from 5.2 to 6.5.0. Is it typical to receive a "parameter=tstatsHomePath not configured" error when upgrading and how to fix?

Motivator

I upgraded my Windows universal forwarder from 5.2 to 6.5.0. All I did was grab the installer from download and install on top of the older config. I am getting a fatal error on the "parameter=tstatsHomePath not configured" is this a typical issue with the upgrade? What should I put in for the tstatsHomePath on the universal forwarder? Should I change the config at the deployment server? for the nix app or any app that uses the os index? How come this didn't error out on any other index config file?

10-07-2016 09:26:18.372 -0500 WARN  IndexerService - Indexer was started dirty: splunkd startup may take longer than usual; searches may not be accurate until background fsck completes.
10-07-2016 09:26:18.372 -0500 ERROR IndexConfig - stanza=os Required parameter=tstatsHomePath not configured
10-07-2016 09:26:18.372 -0500 FATAL IndexerService - Cannot load IndexConfig: stanza=os Required parameter=tstatsHomePath not configured
10-07-2016 09:26:18.372 -0500 INFO  IndexerService - adjusting tb licenses
10-07-2016 09:26:18.372 -0500 ERROR IndexConfig - stanza=os Required parameter=tstatsHomePath not configured
10-07-2016 09:26:18.372 -0500 FATAL IndexerService - Cannot load IndexConfig: stanza=os Required parameter=tstatsHomePath not configured
10-07-2016 09:26:18.372 -0500 INFO  IndexProcessor - Initializing: readonly=false reloading=false
0 Karma

Path Finder

I got a similar error when I accidentally put a state=disabled in my etc/apps/SplunkUniversalForwarder/local/app.conf

0 Karma

Motivator

Thanks you for the help @wkupersa. I will take a look at my app.conf to see if it might be disabled

0 Karma

Super Champion

tstatsHomePath is Location where datamodel acceleration TSIDX data for this index should be stored and is mandatory.
to fix it,
- go to indexes.conf (in your custom app or any app which you configured indexes)
- on each individual index, put a new tstatsHomePath entry
- Put the same value as your hotPath (hope it has enough diskspace)
- distribute and restart

0 Karma

Motivator

@Koshyk Thanks for the answer this makes sence but the system is a universal forwarder and is not indexing any inputs. Why would I need to put in a TSIDX data path on a universal forwarder?

0 Karma

Motivator

Any help with this would be great. Do I still need a TSIDX entry in the index.conf on a UF

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!