About mdplourde

mdplourde · ‎04-13-2022

I followed the steps under "Migrate the KV store after an upgrade to Splunk Enterprise 8.1 or higher in a single-instance deployment" on this document https://docs.splunk.com/Documentation/Splunk/8.2.4/Admin/MigrateKVstore#Migrate_the_KV_store_after_an_upgrade_to_Splunk_Enterprise_8.1_or_higher_in_a_single-instance_deployment When I type in the command ./splunk splunk migrate kvstore-storage-engine --target-engine wiredTiger I get an error that the SplunkD service is not running. I then changed the command to ./splunk migrate kvstore-storage-engine --target-engine wiredTiger (removing the first "splunk" word in the command) and no status prompt after entering. I then checked the mongod.log file and it shows no updates in the file. I know Windows can be a bit finicky with Splunk but is there something that I am missing to get this migration from mmapv1 to wiredTiger working?

mdplourde · ‎12-30-2021

D:\SplunkData\kvstore\mongo\journal\lsn Gave full permissions to the Splunk Administrators OU.

mdplourde · ‎12-29-2021

I fixed the issue. Found out the lsn file in kvstore/mongo/journal didn't have appropriate permissions. This was in the mongod.log file after stop/start of Splunk service.

mdplourde · ‎12-29-2021

I am running Splunk 8.1.0.1 on Windows Server 2016. The KVStore keeps failing when I start up Splunk service. This causes Splunkd server to fail after some time causing the need to restart it to access the Splunk GUI. Are there any logs I should gather to identify what the issue is? I have read through some forums and tried the "stop Splunk, move server.pem file, start Splunk" to generate a new server certificate, but I am still getting the KVStore failure. Any help would be greatly appreciated as I am at a loss at this point.

mdplourde · ‎12-29-2021

I tried stopping Splunk, moved the default server.pem out, started Splunk. It created a new server.pem but kvstore still shows as failed. Running Splunk version 8.1 on Windows Server 2016. Any ideas to resolve kvstore failure issue?

mdplourde · ‎03-18-2021

Is there a step by step instruction to downgrade Splunk?

mdplourde · ‎03-18-2021

We are running Splunk 8.1.0.1. Is this the same for Windows Server 2012 R2? I forgot to add that we have R2.

mdplourde · ‎03-16-2021

My SplunkD Service randomly stops on my Windows Server 2012 making it so that I cannot reach the web interface. I have to restart the service on the Windows server in order to make it reachable again. Is there something I should look at to fix this issu

Posts	8
Solutions	1
Karma Given	1
Karma Received	1
Member Since	‎03-16-2021

Online Status	Offline
Date Last Visited	‎04-13-2022 06:27 PM

How to Migrate to wiredTiger on Windows Server?

KVStore Process Failing to Start

SplunkD Service randomly stopping on Windows Serve...

How to Migrate to wiredTiger on Windows Server?

Re: KVStore Process Failing to Start

Re: KVStore Process Failing to Start

KVStore Process Failing to Start

Re: After upgrading to 6.5.0, KV Store will not st...

Re: SplunkD Service randomly stopping on Windows S...

Re: SplunkD Service randomly stopping on Windows S...

SplunkD Service randomly stopping on Windows Serve...