About fboeje

fboeje · ‎03-03-2022

We had the same issue after upgrading to 8.2.4 Cleaning the browser cache solved the issue

fboeje · ‎11-10-2020

I installed it on Splunk 8.1 but it didnt work and it also didnt create a netcool_custom_modular_alert.log

fboeje · ‎05-21-2020

Thanks. I did exactly that check but there were no large files in the bundle. At this moment the messages disappeared. So I still dont know what caused the messages and what made them disappear.

fboeje · ‎05-21-2020

Thanks. At this moment the messages disappeared. So I still dont know what caused the messages and what made them disappear.

fboeje · ‎05-13-2020

Hi all, We receive the warning : The current bundle directory contains a large lookup file that might cause bundle replication fail. The path to the directory is /opt/splunk/var/run/68DAE477-6A5A-40C6-A7CE-3778404DF158-1589383658-1589383891.delta When looking into this .delta file it contains a few lookupfiles but they are only a few MB's. Also the full bundle files do not contain large lookups, we already blacklisted some large lookupfiles.

fboeje · ‎07-18-2019

Hi all, I get this message frequently on our searchheads. Snapshots are supposed to be created every 60 seconds, but at least 140 seconds have passed since last successful snapshot creation. Does anyone know what this means and what to adjust to solve this issue ? Frans

fboeje · ‎10-25-2018

Same here, one or more searchheads crash several times a day, After recent upgrade to splunk 7.2. Support Call is already in progress. No solution so far. As a workaround we just restart them.

fboeje · ‎10-17-2017

Since upgrading to splunk 7.0.0 I am not able to select our indexes from our indexcluster from "Available search indexes" during user role creation in the Splunk web gui. The indexes do exist and the Index-Role authorization is still working well using the authorize.conf files within the searchhead cluster. I have seen this has been a bug in the early versions of Splunk 6 and this looks like the same issue. Has anyone experienced this issue, before or in Splunk 7.0 ?

fboeje · ‎08-29-2017

Problem solved. I've installed the debug-refresh addon and now i can use the command splunk search '|refresh'

fboeje · ‎08-28-2017

I'm not sure I can use curl because from the url .../debug/refresh you still have to het the refresh button.

fboeje · ‎08-24-2017

Hi. Is there a CLI command to do a debug refresh so I can use it in a script ?

Posts	11
Solutions	1
Karma Given	0
Karma Received	14
Member Since	‎08-24-2017

Online Status	Offline
Date Last Visited	‎03-31-2023 07:37 AM

Splunk says bundle directory contains a large look...

Snapshots are supposed to be created every 60 seco...

Indexes are not available to select from "Availabl...

Is there a CLI command for debug refresh?

Re: Monitoring Console Health Check does not run

Re: SNMP Splunk MA App for Netcool: Is it compatib...

Re: Splunk says bundle directory contains a large ...