Hi splunkers, My client wants to conduct a consistency check on all indexes that they collect So I added enableDataIntegrityControl=1 to every index setting and I created a script to run the command SPLUNK_CMD check-integrity -index "$INDEX" for all indexes. But that's where the problem comes from. The data we keep collecting in real time is that running a command during check-integrity fails. ( ex linux_os logs, window_os logs) results are like this result server.conf/[sslConfig]/sslVerifyServerCert is false disabling certificate validation; must be set to "true" for increased security disableSSLShutdown=0 Setting search process to have long life span: enable_search_process_long_lifespan=1 certificateStatusValidationMethod is not set, defaulting to none. Splunk is starting with EC-SSC disabled CMIndexId: New indexName=linux_os inserted, mapping to id=1 Operating on: idx=linux_os bucket='/opt/splunk/var/lib/splunk/linux_os/db/db_1737699472_1737699262_0' Integrity check error for bucket with path=/opt/splunk/var/lib/splunk/linux_os/db/db_1737699472_1737699262_0, Reason=Journal has no hashes. Operating on: idx=_audit bucket='/opt/splunk/var/lib/splunk/linux_os/db/hot_v1_1' Total buckets checked=2, succeeded=1, failed=1 Loaded latency_tracker_log_interval with value=30 from stanza=health_reporter Loaded aggregate_ingestion_latency_health with value=1 from stanza=health_reporter aggregate_ingestion_latency_health with value=1 from stanza=health_reporter will enable the aggregation of ingestion latency health reporter. Loaded ingestion_latency_send_interval_max with value=86400 from stanza=health_reporter Loaded ingestion_latency_send_interval with value=30 from stanza=health_reporter Is there a way to solve these problems?
... View more