Hello, I accidentally cleaned a KVstoreand I don't have the source data to recreate it. I do have backups of the /var/lib/splunk/kvstore/mongo directory. Is it possible to overwrite the c...
Hi everyone!
I'm trying to restore a KVstore collection with about 100K records. I am consistently encountering the following error around the 5 minute mark when the restoration process is r...
...ommunication with KVStore. See splunkd.log for details. ..
When I removed the search head from Cluster
1. Took backup and clean the kv-storeandrestore the backup, the kv-store status has become "Ready". B...
...plunk Enterprise and receiving from some forwarders.
Let's suppose all indexed data backups have been done regularly (under $SPLUNK_HOME/var/lib/splunk/<my_index> /db).
What is the o...
...enerating.html
I used "Option 1" and as suggested I backed up the KVStore folders from each of the three members.
The link does not provide an explanation for how to recover the backed upkvstore data....
Documentation comparing CSV andKVstore notes that for large lookups, KVStore is preferred over CSV.
http://dev.splunk.com/view/SP-CAAAEY7#kvsvscsv
What is the definition of large? Is it m...
...oes it only need to be done on the Search Head? And if I periodically run the "backup kvstore" command and save the output, to restore I can just use "restorekvstore" on the replacement VM prior to s...
We have an instance where KVstore is not running and we're looking to clean the whole thing out. However, we would like to see if we're able to keep the data.
So, my question is; is there any o...
Hi I am getting KVStore process terminated abnormally (exit code 14, status exited with code 14). See mongod.log and splunkd.log for details. I have stopped splunk and moved m...