Monitoring Splunk

How do I fix KVStore error in indexer cluster

emallinger
Path Finder

Hello,

I used :

|rest /services/server/info|table host kvStoreStatus

to check kvstore status after upgrading splunk from 8.0.4.1 to 8.1.3.

Results are coherent with messages for SHC. It's taken care of.

 

But for my indexers (in a cluster), the value is either "ready" or "failed".

I'm not sure I understand what either really mean. And no clue as how to fix it, as my understanding is that the usual command for that are for search-heads.

Does this mean I can apply the same procedure as :

https://docs.splunk.com/Documentation/Splunk/8.2.1/Admin/ResyncKVstore

Thanks

Regards,

Ema

Labels (1)
Tags (1)
0 Karma
1 Solution

venkatasri
Influencer

Hi @emallinger 

There is a lot to explain, why don't you look at already answered query here - https://community.splunk.com/t5/Getting-Data-In/Where-should-the-kvstore-be-deployed-in-a-distribute...

---

An upvote would be appreciated if this reply helps!

View solution in original post

emallinger
Path Finder

Hello,

Thanks , that was exactly what I was looking for !

It pertains to what I understood but wasn't sure enough of.

Regards,

Ema

0 Karma

venkatasri
Influencer

Hi @emallinger 

There is a lot to explain, why don't you look at already answered query here - https://community.splunk.com/t5/Getting-Data-In/Where-should-the-kvstore-be-deployed-in-a-distribute...

---

An upvote would be appreciated if this reply helps!

View solution in original post

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.