Hi Splunkers, Good day. I am experiencing an issue in our cluster where the searches are all skipping with the reason "Searchable rollingrestart or upgrade is in progress". My understanding is t...
...ondering why is this a problem. The problem I am trying to solve is long rolling-restart times on the index cluster. Because of the time the indexer spend registering bid’s with the cluster master, i...
Splunk Enterprise 9.0.1 on premise, clustered search heads and indexers. DB Connect 3.7.0. We found out that every time the indexer cluster is restarted, some events are being duplicated in the i...
Hi all,
We have in our productive splunk architecture a very unpleasant problem.
The rolling-restart behaves not as he should. Be it creating an index or otherwise. In a rolling-restart, e...
After pushing a new shcluster bundle, the shcluster self-initiated a rollingrestart. We have 15 servers in this cluster. 5 completed the restart at some point after the "splunk rolling-restart s...
Using Splunk 7.3.3, after I initiated a rollingrestart from the cluster master (multi-site indexer cluster), the first indexer began to restart. Then it showed batch adding, then the Indexer C...
Hi everyone, could someone help me with SHC issue? Problem is: I have SHC with 6 members. Splunk is running as systemd service. Today morning I made rollingrestart of SHC (via GUI, searchable o...
...aster?
The error I am getting are
search was deferred to run after the searchable rollingrestart or upgrade is completed. There are currently 35 deferred searches in total.
search was skipped d...
We have an issue where all the scheduled searches are getting skipped whenever rollingrestart is in progress.
Also, since few weeks, we have observed that the cluster master automatically i...
When Cluster Master initiates a restart either by "splunk apply cluster-bundle" or "splunk rolling-restart cluster-peers" many of the indexers fails to restart - the server is told to restart, it s...