KVStore process will not start

[eholz1]

Hello All,

I have searched high and low to try to discover why the kvstore process will not start.

This system was upgraded from Splunk 8.0, to 8.2, and finally 9.2.1. I have looked in mongod.log and splunkd.log, but do not really see any thing that helps resolve the issue. Is ssl required for this? the - is there a way to set a correct ssl config, or disable it in the server.conf file? Would the failure of the KVstore process affect IOWAIT?

I am running on Oracle Linux, ver 7.9 - I am open to any suggestions.

Thanks

ewholz

[eholz1]

Hello, and Thanks for tip. I will look into getting TLS set and/or a new cert - the cert will need to be self-signed.  Splunk was re-started after each upgrade. I am not familiar with the acronym of "SHC" -Thanks for the info.

ewholz

[isoutamo]

SHC - Search Head Cluster.
You can use openssl to look validity of cert. There are lot of examples on net, how this can do.

[eholz1]

Thanks again for the info and clarification

ewholz

[isoutamo]

TLS is needed. Most common reason for not starting is expired cert. You just need to check this and replace it with valid one. But you should see that issue on mongodb.log.
Have you checked that also mongodb engine’s have updated to a new one? Also version number has updated.
Have you started splunk after each version updates so splunk can do needed migrations? With SHC you must do manual migration for it.