Tried with Splunk local admin and still seeing the error along with this "Splunkd daemon is not responding: ('Error connecting to /servicesNS/nobody/splunk_app_db_connect/db_connect/rpcserver/default: The read operation timed out',)" ... View more

Customers with active support contracts receive the following communication on August 30, 2017; "Since October 2013, our Splunk Enterprise 6.x release train has delivered major advances in functionality, performance and scale. Throughout this time, we have continued to support Splunk Enterprise 5.x customers. However, with the pending launch of Splunk Enterprise 7.0, support for Splunk Enterprise 5.x releases will cease. In accordance with our Support and Maintenance Terms and Conditions, please be notified that Splunk Enterprise 5.x will no longer be supported after November 30, 2017. After this date, maintenance releases and software fixes will also no longer be available. We understand you may still be running a 5.x version of Splunk Enterprise and our Splunk Professional Services team has several service offerings* to assist you with your upgrade. We are available to explore the best options for you to plan and execute a successful migration. Please contact your Splunk account manager or partner with any questions related to our service offerings and to help you establish a migration path that is right for your business. ",From notification sent to customers with active support subscription on August 30, 2017; "Since October 2013, our Splunk Enterprise 6.x release train has delivered major advances in functionality, performance and scale. Throughout this time, we have continued to support Splunk Enterprise 5.x customers. However, with the pending launch of Splunk Enterprise 7.0, support for Splunk Enterprise 5.x releases will cease. In accordance with our Support and Maintenance Terms and Conditions, please be notified that Splunk Enterprise 5.x will no longer be supported after November 30, 2017. After this date, maintenance releases and software fixes will also no longer be available. We understand you may still be running a 5.x version of Splunk Enterprise and our Splunk Professional Services team has several service offerings* to assist you with your upgrade. We are available to explore the best options for you to plan and execute a successful migration. Please contact your Splunk account manager or partner with any questions related to our service offerings and to help you establish a migration path that is right for your business." ... View more

The Splunk Web UI, banner, will display various items in the "Messages". How do you control what is sent to this? How do you configure alerts from it? | rest /services/messages | table title message severity timeCreated_iso published splunk_server author I have found the above from others post now but would like additional info, as in the is there a way to control what is sent to it? Current this message is seen by all users, can this be controlled? ... View more

I had this error on 1/10 index`ers - restarted splunk twice and it solved the problem ... View more

I found this which closely matches your question. | rest /services/messages | table title message severity timeCreated_iso published splunk_server author I then created an alert from this.. ... View more

The bug report is assigned to an engineer and has been marked as "to fix". ... View more