Splunk Enterprise

Comprehensive documentation about troubleshooting

dspencer
Path Finder

Is there a comprehensive resource describes the data rebalancing process and troubleshooting steps in detail if splunk happens to stall?

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @dspencer 

I think this will probably be the best starting point: https://help.splunk.com/en/splunk-enterprise/administer/manage-indexers-and-indexer-clusters/9.4/man... which as details on how to check the status etc. Ultimately a solution for any issues will depend on the problem you face. 

Have you tried to carry out a rebalance and failed or just thinking hypothetically?

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

dspencer
Path Finder

I ran a full rebalance, non-searchable, threshold = 95% over the weekend and it seemed to get stuck at 99.72% before i stopped it. Splunk documentation isn't comprehensive enough for troubleshooting purposes and some of the post I've found don't explain anything. I need references that will help me determine what the issue is.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Get Agentic with Splunk Lantern: Connect to Cisco Cloud Control, Transform ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

July Community Events: Master ITSI 5.0 & Automate Splunk

Struggling with alert fatigue or feeling like you're spending more time on infrastructure maintenance than ...

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...