For instance, if I try this in my distsearch.conf, it doesn't work:
[searchhead:SearchHead01-root]
mounted_bundles = true
bundles_location = "/opt/splunk/SH_bundles"
Will this work? Am I doing something wrong? I can't seem to make this work. Splunk complains that this isn't a directory:
4-07-2011 12:45:19.343 -0700 ERROR StreamedSearch - Bundle mounting: bundle location must be a directory, distsearch.conf stanza=searchhead:SearchHead01-root, bundles_location="/opt/splunk/SH_bundles", search head server_name=SearchHead01-root
No, I tried the exact same configuration, and got the same error.
Remove the double quotes. Then, it should work. This is not a script variable. The distsearch.conf does not like double quotes.
No, I tried the exact same configuration, and got the same error.
Remove the double quotes. Then, it should work. This is not a script variable. The distsearch.conf does not like double quotes.