stoomart, your script appears to be exactly what I need, when I run the script in a RHEL 9 box it immediately transitions to the fsck command with a single bucket option, then displays an error message "path is not extant". Your thoughts? Also please clarify where you show "{index-name}", are you using the brackets to indicate placeholders or are they to be used in the thawed bucket path and at the end? Thank you in advance for your help!
... View more
A quick google search turned up these sublime packages in case they have been overlooked by anyone, I personally haven't used them. I am on the hunt for something similar in atom.io as well though.
https://packagecontrol.io/packages/Splunk%20Syntax
https://packagecontrol.io/packages/Splunk%20Conf%20File%20Syntax%20Highlighting
... View more
I am also having this issue and I was unable to resolve by disabling sos_refresh_splunk_servers_cache and hitting the debug/refresh?entity=admin/views endpoint, however I am using a DS to deploy SOS to my SHP and suspect that whatever the endpoint is changing isn't being persisted because the DS is overwriting the change after the next phone home. Can you tell us what the endpoint is actually doing? I could disable my deployment client and troubleshoot that way, but it would be nice to know what we are actually doing here 🙂
I am using the latest version of sideview and sos (3.2.1) on splunk 6.2.1 using SHP+Mounted Bundles and a DS to deploy sos to the SHP.
... View more