Installation

Unable to push configuration bundle

_pravin
Contributor

Hi,

 

I am trying to push the configuration bundle from the CM to the indexers. I keep getting the error message "Last Validate and Check Restart:  Unsuccessful"

The validation is done for one of the indexers, and it's 'checking for restart' for the other two indexers.

When I checked the last change date for all the indexers, only one of them has been updated and the other 2 are not. But it's opposite to what is shown in the UI of the CM.

 

Regards,

Pravin

 

 

_pravin_0-1737042561656.png

0 Karma

_pravin
Contributor

Hi @gcusello ,

We have enough space in the servers, it's not an issue with the disk.

Thanks,

Pravin

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @_pravin ,

in this case, I'm sorry, but the only solution is to open a case to Splunk Support.

before opening the case, remember to prepare the diags of the CM, the OK IDX and one NOT OK IDX.

Ciao.

Giuseppe

gcusello
SplunkTrust
SplunkTrust

Hi @_pravin ,

check if you have enough disk space in all your indexers.

If you have, open a case to Splunk Support.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...