...ead states "No knowledgebundlereplication cycle status is available yet." The search head that shows the error with the replication cycle status has no local knowledgebundle in /opt/splunk/var/r...
We are setting up our first dedicated search head. Need some info of the Knowledgebundlereplication process. 1) what is the maxbundlesize units ? the default 2048 - i...
Hi All, I have an Warning message on my search head GUI as below: "The current bundle directory contains a large lookup file that might cause bundlereplication fail. The path to the d...
Due to some Performance Issues, Lookup/Dashboard failures, search failures and taking longtime to execute the searches. we have done some troubleshooting and come up with some exclusion list which n...
Hello, I'm upgrading a search head from 7.3.0 to 8.2.1. First I upgraded it to 8.1.5 and I didn't experienced any problems. Then I upgraded to 8.2.1 and the knowledgebundlereplication to the s...
...everal details on how knowledgebundlereplication works.
Should I be concerned that I have a large set of geospatial lookup files?
These geospatial lookup files will rarely, if ever, change. O...
...ecommended way is to have two separate SH clusters - But it doesn't look like we will have knowledgebundle (configs/user knowledge objects etc) replication between the two SH clusters formed. If this is the c...
We are trying to test out the new "cascading" option for the knowledgebundlereplication policy. We have sat the replication policy on the search head to "cascading" in d...
Hi,
I'm looking for some answer and suggestion how I could decrease/workaround the knowledgebundlereplication errors we're seeing in our environment which is a multi site indexer clustering w...