Splunk Enterprise

KV Store not updated by Outputlookup

_Tom
Explorer

We have a saved search in a search head cluster which returns its results in a KV-Store lookup using append=true.
Although the searches run successfully, the results where not stored in the KV-Store for few executions.
Unfortunately, we were not able to locate the issue in the mongod.log or splunkd.log.
Any ideas are appreciated.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

New Case Study Shows the Value of Partnering with Splunk Academic Alliance

The University of Nevada, Las Vegas (UNLV) is another premier research institution helping to shape the next ...

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...