I upgraded Splunk Enterprise to 10.0.0, but the supervisor is not running.
Checked the server.conf the supervisor is enabled
[teleport_supervisor]
disabled = false
Search
index=_internal source=*supervisor.log*
return empty result
@Kevin0202
Can you see any errors with below,
index=_internal source=*splunkd.log* "*supervisor*"
Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!
index=_internal source=*splunkd.log* "*supervisor*"
I now restore backup and upgrade it again.
There are supervisor logs this time.
@Kevin0202
Can you check below,
-Is your Splunk running as root or a dedicated user?
-Check if any other process is bound to port 8194
netstat -anp | grep 8194
-Also check internal logs for any certificate error
Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!
I did not find any logs of certificate error related to supervisor or KVstore.