I have a Splunk instance that is deployed on EBS Volume mounted to EC2 Instance. I started working on enabling Smart Store for one of my indexes but whenever I have the indexes.conf configured to let one of my indexes use the smart store, when I restart splunk it basically hangs on this step: Checking prerequisites... Checking http port [8000]: open Checking mgmt port [8089]: open Checking appserver port [127.0.0.1:8065]: open Checking kvstore port [8191]: open Checking configuration... Done. Checking critical directories... Done Checking indexes... Nothing found in logs, I am just puzzled how to fix this. Can anybody hint what can be the issue? indexes.conf: [volume:s3volumeone] storageType = remote path = s3://some-bucket-name remote.s3.endpoint = https://s3.us-west-2.amazonaws.com [smart_store_index_10] remotePath = volume:s3volumeone/$_index_name homePath = $SPLUNK_DB/$_index_name/db coldPath = $SPLUNK_DB/$_index_name/colddb thawedPath = $SPLUNK_DB/$_index_name/thaweddb maxGlobalDataSizeMB = 0 maxGlobalRawDataSizeMB = 0 homePath.maxDataSizeMB = 1000 maxHotBuckets = 2 maxDataSize = 3 maxWarmDBCount = 5 frozenTimePeriodInSecs = 10800 small numbers for bucket size etc. are intentional to allow quick testing of settings.
... View more
