Splunk Enterprise

Issue: Azure add-on - receiving error: HTTP 503 Service Unavailable -- KV Store initialization failed.

kcooper
Communicator

Azure add-on has been install on HF for months. 

The certificate expired last week. appears to have caused an issue with the Azure add-on. no data ingesting since certificate expired. 

* certificate was replaced. 

* data started ingested again right after the new certificate was working. 

* then after about 4 hrs no data was being ingested again on the HF for the azure add-on

* from recommendations on answers, changed the "Max Batch Set Iterations" to 1000

-- didn't help

* why would data be ingesting into SPlunk after the certificate was replaced but then stop being ingested into Splunkl

 
Labels (1)
Tags (1)
0 Karma

Vardhan
Contributor

Hi,

Is the certificate got replaced from azure end?

If it is for every new certificate the API key will change. Check the API was same or not in Azure and compare it with your Splunk configuration.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...