Knowledge Management

[smartStore] Configuring remote storage on indexes results repeat many times?

rbal_splunk
Splunk Employee
Splunk Employee

After configuring remote storage on indexes, We are observing duplicate results. Sometime result repeat many times

Tags (1)
0 Karma

rbal_splunk
Splunk Employee
Splunk Employee

The issue was "repFactor = 0" for index enabled for the remote store. Which means the same bucket from multiple indexers got bootstrapped.

To resolve asked customer to set "repFactor = auto"

Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques

Hello! We are excited to kick off a new series of blogs from SplunkTrust member ITWhisperer, who demonstrates ...

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...