Hi,
I run search as index=testvi and all works fine, but when I add any condition, I am getting "Failed to start MapReduce job" error. I looked around search.log which is as follows:
04-23-2...
Using Mapr Version 4.01 (MR2) and Hunk 6.2. Configured a mapr provider and virtual index. Simple search works (index=my_virtual_index) but when I add a condition and a MR2 job tries to kick off in M...
...ompletely new "Big Data" environment or would I directly start with Splunk?
What I understood so far is that Hunk+Hadoop fits better for long running analysis or reports covering huge amounts of data. W...
I've managed to setup Hunk and run streaming searches without any problem. However when I try to run a reporting search, that starts a MapReduce job the search fails with an error message like t...
....mr.JobStartException: Failed to start MapReduce job. Please consult search.log for more information. Message: Failed to create Hunk directories due to permission denied. Please make sure you have w...
abc@abc /opt/hunk/bin $ sudo ./splunk start
Splunk> Finding your faults, just like mom.
Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
C...
Using Hunk with simple search like index=myindex retreives all the expected results. But as soon as I add something else (ei: sourcetype=mysourcetype or add something like | stats by count user) t...
...uel_city_mpg","fuel_hwy_mpg","fuel_l_yr","c02_g_km"
Hunk is running from the host hc2nn and I can start it as login at http://hc2nn:8000. I can run searches via
index=cdh5_vindex
and I can s...
Running a query in Hunk against the firewall logs stored over the last 60 minutes and it appears to complete, but I see this:
• [cdhprovider] Error while running external process, return_code=255....