Splunk Enterprise Security

Smartstore unable to replicate buckets

Path Finder

Hi all,

We have a Splunk infrastructure with ESS using SmartStore over S3 on AWS. We moved from Splunk 7.3.0 to 7.3.4 and none errors appeared during the update procedure.

Once we disabled the maintenance mode, the Replication Factor and the Search Factor never met due to 2 buckets inside two different indexes. We are trying to fixup those buckets, but it never completed and looks stuck in target_wait_time status.

After having looked inside S3 itself, we noticed that the folders which are being referenced inside Splunk are not present in there.

Is there any way to solve this issue?

Thanks in advance.


0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...