Hello,
I am new to splunk and i installed the Exchange App and got all the prerequisites done except the first one that asks for v6.2.0 I have the newest version installed but it will not pass the test since Key Value store must be enabled. I checked in the server.conf file and it is enabled so I'm not sure what else to do. Anyone know how to get the exchange app to pass all the prerequisites?
I've seen this problem occur in test environments.
Are you running this in a nix environment? If so, this is likely a permissions issue, and if it is what I think it is, we might need to file a bug. It *might have been fixed in 6.2.1, so give that a try first.
Here's what's going on:
When the KV store service starts up, it finds that this file has bad permissions, and then only fails with an error message to $SPLUNK_HOME/var/log/splunk/mongod.log:
2014-12-18T15:39:43.555Z permissions on /opt/splunk-dash/var/lib/splunk/kvstore/mongo/splunk.key are too open
In order to fix the problem and ensure that KV store is running, you need to change the permissions of this file so that the KV store service doesn't complain and not start.
To fix this:
From a shell (or Terminal window), issue
chmod 700 /opt/splunk/var/lib/splunk/kvstore/mongo/splunk.key
Restart Splunk and run the guided setup on the Exchange app again.
Wait...are you saying you are not running Splunk Enterprise 6.2? Or are you saying you are running 6.2.1?
Do you have a link to the download page? I just downloaded this 2 days ago. Not sure why i didn't get the latest download??
The download link is: http://www.splunk.com/download
6.2.1 was released yesterday. 🙂
Are you using a free license for Splunk Enterprise? There was a defect in 6.2.0 that KV store didn't work with the free license. That is fixed in 6.2.1.
Im running 6.2.0