Hi,
I had setup a search head cluster with 4 members but not able to launch ITSI app. I think it's due to KVstore issue.
[splunk@********** bin]$ ./splunk show kvstore-status
This member:
backupRestoreStatus : Ready
disabled : 0
guid : 63293D05-FE69-4F0A-B782-0********
port : 8191
standalone : 0
status : starting
Kvstore status stuck at starting, it's not changed to ready at anytime?
Last time I saw this, we had a permissions issue - parts of Splunk weren't owned by splunk:splunk
Did you happen to install (or start) Splunk as not user splunk
?
No, Splunk Enterprise installed with splunk user and all files owned by splunk user.