About Namo

Namo

Hi @tscroggins I have appended intermediate and root cert to the cacert.pem .After this error is not observed.

Namo

@livehybrid I will check,Thanks

Namo

Hi @kiran_panchavat There is no folder with the below name in the $SPLUNK_HOME/etc/apps folder 100_<stackname>_splunkcloud

Namo

The KV sore was already on 4.2 before the upgrade.Hence went ahead with the splunk upgrade. The readme file was reviewed before the upgrade. The error states Error receiving request from client: SSLHandshakeFailed: SSL peer certificate validation failed: self signed certificate in certificate chain. Ending connection from 127.0.0.1:58948 Does it mean we need to review the certificate steps also. Currently the server cert is issued by Digicert and cacert doesnt have Digicert as list of trusted list

Namo

Hello @tej57 It was upgraded from 9.2 to 9.4. The cert is not expired ,is valid for another few days . the server cert is a combined cert

Namo

Hello Team, We are on Linux and Post upgrade to splunk 9.4.3, KV store is failing.I have followed few recommendations given in the community for the related issue,but they are not working .Below is the mongod.log SSL peer certificate validation failed: self signed certificate in certificate chain 2025-06-20T08:09:03.925Z I NETWORK [conn638] Error receiving request from client: SSLHandshakeFailed: SSL peer certificate validation failed: self signed certificate in certificate chain. Ending connection from 127.0.0.1:54188 (connection id: 638) This error can be bypassed if we add the below stanza in server.conf, though it is a workaround only. enableSplunkdSSL = false Any other inputs is appreciated.

Namo · ‎06-18-2024

hi Giuseppe, Thanks for the response. the issue is for both internal and external indexes , the event count and current size is not showing any value. You mentioned the default search path, could you please shed some info on that,may be i can explore that option.

Namo · ‎06-18-2024

I am new to splunk and observing the event count and current size showing a 0, even though we can search on the index and have data . Any insights will be helpful.

Posts	8
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎06-06-2024

Online Status	Offline
Date Last Visited	4 weeks ago

KV store failing to start in 9.4.3

Event count is showing Zero

Re: KV store failing to start in 9.4.3

Re: KV store failing to start in 9.4.3

Re: KV store failing to start in 9.4.3

Re: KV store failing to start in 9.4.3

Re: KV store failing to start in 9.4.3

KV store failing to start in 9.4.3

Re: Event count is showing Zero

Event count is showing Zero

Are you a member of the Splunk Community?