Deployment Architecture

Under what configuration file and stanza do I configure CMConfig - multisite=[true|false]?

dave_maclean
Explorer

Every 5 seconds on my deployment server (in a clustered environment), I get this in splunkd.log:

WARN CMConfig - multisite=[true|false] missing from this stanza. Assuming this isn't multisite

I realize it's not a problem per se, but I'd like to add 'multisite = false' in the appropriate stanza in the appropriate config file. I tried adding the following to the $SPLUNK_HOME/etc/system/local/server.conf:

[clustering]
multisite = false

but that didn't help. Any suggestions please? Wait for 6.2? Note: my Cluster Master is a separate server, and it does not display this message in its splunkd.log.

_smp_
Builder

I was getting this error on my 7.1.7 Search Head cluster, which is connected to multiple index clusters. I was able to eliminate it by editing server.conf:

[clustermaster:<label>]
multisite = false
0 Karma

rolszewski
New Member

Neither of these solutions solved my problem, however this link showed that I should put the multisite = false in the clustermaster:somesite stanza

https://docs.splunk.com/Documentation/Splunk/7.2.5/Indexer/Configuremulti-clustersearch

0 Karma

woodcock
Esteemed Legend

I got this error when I added site=site1 but did not restart my Search Head. Try a restart and it should work.

0 Karma

dxu_splunk
Splunk Employee
Splunk Employee

any luck w

[general]
site = default

(default if ur not using multisite)

I remember this was a typo for searchheads (they would complain about 'multisite' but what they meant to complain about was 'site')

0 Karma

hortonew
Builder

I just tried doing this and it didn't help.

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...