Deployment Architecture

In a diag for UniversalForwarder/LightWeightForwarder, var/lib/splunk/fishbucket/db is empty?

zliu
Splunk Employee
Splunk Employee

After ran a diag for UniversalForwarder/LightWeightForwarder, found that var/lib/splunk/fishbucket/db is empty. Anything is not right?

Tags (1)
1 Solution

zliu
Splunk Employee
Splunk Employee

on recent versions of UF and LWF(4.2.x), systeminfo.txt's "find" section is not reporting directory listings correctly - it is always empty. Until this is fixed, we will have to manually do an ls -lR on $SPLUNK_DB/fishbucket. Bug: SPL-41886.

View solution in original post

zliu
Splunk Employee
Splunk Employee

on recent versions of UF and LWF(4.2.x), systeminfo.txt's "find" section is not reporting directory listings correctly - it is always empty. Until this is fixed, we will have to manually do an ls -lR on $SPLUNK_DB/fishbucket. Bug: SPL-41886.

Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...