Splunk Dev

Why am I getting invalid site id

a212830
Champion

Hi,

I'm building out my dev Splunk 6.3 env, and ran this command:

./splunk edit cluster-config -mode master -multisite true -site RTP -available_sites RTP,OMA,MMK -site_replication_factor origin:1,total:3 -site_search_factor origin:1,total:3 -secret splunkDEV

When I do this, it returns "In handler 'clusterconfig': Invalid site id: RTP". Should RTP be removed, since it's listed in the initial site statement? The training docs follow this format.

0 Karma
1 Solution

a212830
Champion

Found it. Apparently they have to be named site1, site2.... Bummer. OK. Onward and upward!

View solution in original post

dshpritz
SplunkTrust
SplunkTrust

From the server.conf spec:

site = < site>
* Specifies the site that this splunk instance belongs to when multisite is enabled.
* Valid values for site-id include site1 to site63

You can't make up your own names, you have to use site+integer.

Thanks,
Dave

0 Karma

sloshburch
Ultra Champion

Or the classic joke: You can use whatever name you want, as long as its site+integer 😉

a212830
Champion

Found it. Apparently they have to be named site1, site2.... Bummer. OK. Onward and upward!

Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...