Other Usage

How to resolve KV store lookup definition error?

uagraw01
Motivator

My KV store lookup defination files are not working and giving me below error.

uagraw01_0-1682422910480.png

Below are current status :

uagraw01_1-1682422960994.png

Please help me what I need to fix so all my KV store lookups will work.

 

Labels (1)
0 Karma

ccl0utier
Splunk Employee
Splunk Employee

Have you tried following the documentation here?

You don't mention if you're in a distributed/standalone or clustered env., but did you try to manually upgrade your KVStore? 
Did you check your migration logs or mongod log?  Any errors?

0 Karma

uagraw01
Motivator

@ccl0utier store engine wiretiger is working fine in 9.0.1. Now other thing is that I have another VM where Splunk installed on 8.2.6 and there store engine is MMAP, and there all the kv lookups are working fine. So now I am copying the complete app where we have all the kv store lookup in VM 8.2.6 to VM 9.0.1. Now I am not getting any error but none of the kv lookups are working .

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...