Splunk Search

splunk 6.6 installed just now, index=_internal sourcetype=splunkd says no results, is it a bug?

lakshmisplunk
Explorer

Hi,
Just now installed splunk.6.6 on Windows10 and loggedin. Uninstalled it.
installed again with new location for SPLUNK_HOME to c:\splunk\
Installation is successful, created a new user, changed password search query index=_internal sourcetype=splunkd says no results.

tried with index=* , again no results.
time window changed to 24 hours by default, instead of All time.

Regards,
Lakshmi K

Tags (2)
0 Karma

lakshmisplunk
Explorer

Hi,
https://answers.splunk.com/answers/335162/how-do-i-troubleshoot-why-splunk-has-stopped-index.html
Mus answered this

in
htheretp://localhost:8000/en-US/manager/search/apps/local
forward enabled. Disabled it. Restarted splunk.
Issue resolved

0 Karma

lakshmisplunk
Explorer

http://localhost:8000/en-US/manager/search/apps/local
SplunkForwarder
SplunkLightForwarder
enabled.
As its my local installation, I moved the local folder from C:\Splunk\etc\apps\SplunkForwarder\ away, restarted splunk. Started working.
Mus anwered earlier

0 Karma

inventsekar
SplunkTrust
SplunkTrust

this is an usual one. the _internal index gets data later.
trying adding some sample data / log files, the tutorial data (http://www.splunk.com/base/images/Tutorial/Sampledata.zip) .. then internal index will get data.

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...