Splunk Enterprise

Comprehensive documentation about troubleshooting

dspencer
Path Finder

Is there a comprehensive resource describes the data rebalancing process and troubleshooting steps in detail if splunk happens to stall?

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @dspencer 

I think this will probably be the best starting point: https://help.splunk.com/en/splunk-enterprise/administer/manage-indexers-and-indexer-clusters/9.4/man... which as details on how to check the status etc. Ultimately a solution for any issues will depend on the problem you face. 

Have you tried to carry out a rebalance and failed or just thinking hypothetically?

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

dspencer
Path Finder

I ran a full rebalance, non-searchable, threshold = 95% over the weekend and it seemed to get stuck at 99.72% before i stopped it. Splunk documentation isn't comprehensive enough for troubleshooting purposes and some of the post I've found don't explain anything. I need references that will help me determine what the issue is.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Make Your Machine Data AI-Ready in Splunk

Every team is getting ready for AI agents.    Watch On-Demand   In this Tech Talk, Splunk platform specialists ...

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...