@shiba wrote: Security risk warning: Found an empty value for 'allowedDomainList' in the alert_actions.conf configuration file. If you do not configure this setting, then users can send email alerts with search results to any domain. You can add values for 'allowedDomainList' either in the alert_actions.conf file or in Server Settings > Email Settings > Email Domains in Splunk Web. As already explained, this warning matters only if you care about where alert emails can be sent. Failed to start KV Store process. See mongod.log and splunkd.log for details. 2024/12/25 11:26:57 KV Store changed status to failed. KVStore process terminated.. 2024/12/25 11:26:56 KV Store process terminated abnormally (exit code 14, status PID 2757 exited with code 14). See mongod.log and splunkd.log for details. 2024/12/25 11:26:56 These messages definitely are a problem on a search head, but not on an indexer. Consult mongod.log for details about the problem and fix what is reported. For indexers, turn off KVStore by adding the following to server.conf [kvstore]
disabled=true
... View more
