@bseppanen1 Mine barfed on a "^". ... View more

Been working with Support and this is what has worked. Verify correct permissions: chmod 444 $Splunk_home/share/splunk/cli-command-completion.sh $Splunk_home/bin/setSplunkEnv $Splunk_home/etc/system/static/splunkrc_cmds.xml Then open "$SPLUNK_HOME/etc/system/static/splunkrc_cmds.xml", Then go to the line 6232 and add merge-buckets for "cmd name" 6232 <cmd name="merge-buckets"> Save the change $SPLUNK_HOME/bin source ./setSplunkEnv and verify it works. This got tab completion working again. Hope this helps! ... View more

I opened a ticket with Splunk Support about this. Here is the reply: I have research further on this and found that Splunk removed OpenJDK in 8.0.5. It's only used by DFS. If you're not using DFS, you can delete it in both places, SPLUNK_HOME/bin/jars and SPLUNK_HOME/etc/apps/splunk_archiver/java-bin/jars Please find the steps below: 1. Browse to the following directories and remove the .jar files: - $SPLUNK_HOME/bin/jars - $SPLUNK_HOME/etc/apps/splunk_archiver/java-bin/jars/ ## Only proceed when the above is complete on all splunk instances ## 2. On all SH instances (SH,CM, Deployer, Deployment Server, License Master), delete all existing knowledge bundles from $SPLUNK_HOME/var/run ## Only proceed once step 3 is complete ## 3. On the indexers, delete all existing knowledge bundles from $SPLUNK_HOME/var/run/searchpeers ... View more