Hello everyone, Starting from version 10.2.0 and apparently all above, I have an issue concerning the KVStore. As indicated in the title, on SH members, if the replication factor is set to more than 1 (I have only tried 2 and 3) the KVStore never starts, its status is stuck on 'starting' (using show kvstore-status) forever. I have seen the issue SPL-299914 in the Splunk release notes(fixed in 10.2.3 AND 10.2.4) which seem to correlate with my problem but the fix does not seem to actually resolve my problem. (I have also tried version 10.4.0 without success) For the context, I have 3 SH members running on linux that can be configured to work either independently or in a common SHCluster, the configuration was done by adding the following parameters in server.conf for standalone SH members and removing them in a cluster: "[shclustering] captain_uri=<some_uri> election=0 mode=captain" And tweeking the replication factor to the number of members ([1-3]). This worked fine on version 9.3.4 and above but not anymore. In version 10.2.0 specifically (from my test but to confirm), the mongod.log indicate a segfault when trying to start which causes it to start in a loop without success, however in 10.2.4 and 10.4.0 I don't have any relevant log in mongod.log and no more segfault or any crash for that matter. As for splunkd.log I only saw a vague log mentioning a KVStore error without additional informations but I might have missed something. Due to confidentiality issues I unfortunately cannot share them here, but if someone has seen similar behaviors, perhaps I could be pointed in the right direction ?
... View more