Splunk Enterprise

Splunk KV store Issue

sivakrishna
Path Finder

Hi Team,

We have 4 Search heads are in cluster in that one Search head is getting the KV store PORT issue asking that change the port remaining 3 SHs working fine. We are unable to restart the Splunk on that particular SH. If i check the SH cluster status only 3 servers are showing now.

Splunk installed version: 9.0.4.1

for error visibility Please find the attached. 

sivakrishna_0-1695809939058.png

Regards,

Siva.

 

Labels (2)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @sivakrishna 

it seems KVstrore port 8191 is used by other application.

can you check which process using 8191 port ,

ps -ef | grep -i 8191 

if is used by other application check with os team to check and ask them use other port, 

then you can start splunk and kvstore will start on port 8191

0 Karma

sivakrishna
Path Finder

Thanks for the reply!!

 

can we change the port for this server??

What will happen if i change the PORT for this single server when it's in the cluster?

Remaining 3 servers are running on the 8191 PORT.

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @sivakrishna 

instaed of changing rhe port, if 8191 is already used by splunk then please kill  and start the splunk

have you checked which process using 8191 ,

if you wan the change the port , you need to change port on rest search heads, which is not recomended 

0 Karma

sivakrishna
Path Finder

sivakrishna_0-1695812367599.png

Still getting the same PORT issue @SanjayReddy 

0 Karma

sivakrishna
Path Finder

Hi @SanjayReddy 

 

If i execute the above process check command getting the below.

sivakrishna_0-1695812203798.png

 

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...