Splunk Search

Could not find writer

kmattern
Builder

What does this mean and how do I get rid of it?

Could not find writer for: /admin/BHPortalStats/history/.dummy_history [0] [C:\Program Files\Splunk\etc]

0 Karma
1 Solution

halr9000
Motivator

I found that if you look at either _internal index or the local splunkd.log, there's probably going to be more detail. In my case, it was a file permissions issue writing to $SPLUNK_HOME/etc/users/. Yours might be different.

View solution in original post

halr9000
Motivator

I found that if you look at either _internal index or the local splunkd.log, there's probably going to be more detail. In my case, it was a file permissions issue writing to $SPLUNK_HOME/etc/users/. Yours might be different.

Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...