When I try to update to 2.3.0 I get an error:
500 Internal Server Error
Return to Splunk home page
View more information about your
request (request ID =
57a858aadd43f4908) in SearchThis page was linked to from
http://localhost:8000/splunkserver/en-US/manager/system/appsremote?offset=0&count=20&order=relevance....
I try to update from the Update button through BROWSE MORE APPS menu option
and also from MANAGE APPS option
Is there any issue on that update process?
See this for a possible solution:
https://answers.splunk.com/answers/387455/having-hundreds-of-sqlitepersistentstorageimp-erro-1.html
Thanks, this answer solved the errors related the SQLPersistentStorage...
But I cannot update DBConnect. Still getting the same message.
Any idea? Can I uninstall this app and begin from zero?
I suppose so. Technically all an upgrade does is a recursive copy on top of what is already there. so maybe try that first.
Something like this should do the trick if executed by the user that owns the directory:
tar -zxvf dbconnect.tar.gz -C /opt/splunk/etc/apps
Here you have two PDFs with the content of index=_internal log_level=error and another with log_level=warn*link text
All I see is the warn* events
Oh I see the error.pdf link now. See my answer below.
Whats in index=_internal log_level=error or log_level=warn*
?
I have attached two files answering your question