Deployment Architecture

Why does my Splunk Cloud 7.0.0.1 instance generate a very high volume of errors "bucket archiving failed"?

lufermalgo
Path Finder

Hi,

My instance of Splunk Cloud 7.0.0.1 generates a very high volume of errors of this type:

03-12-2018 13:37:09.287 +0000 ERROR CacheManager - action=upload, cacheId="ra|idx_myindex~5~693AB0FF-CF92-435C-BDDF-2E577F0739D9|5B249B1C-988B-4A29-9DE9-F0DA15952324_search_myemail@account.com_NS6f3ad8ed48f3e0f0", status=failed, reason="bucket archiving failed"
03-12-2018 13:37:09.287 +0000 ERROR CacheManager - failed to save download state to path=/opt/splunk/var/lib/splunk/idx_myindex/summary/6_693AB0FF-CF92-435C-BDDF-2E577F0739D9/5B249B1C-988B-4A29-9DE9-F0DA15952324/search_myemail@account.com_NS6f3ad8ed48f3e0f0/cachemanager_local.json
03-12-2018 13:37:09.286 +0000 ERROR CacheManager - action=upload, cacheId="ra|idx_myindex~8~693AB0FF-CF92-435C-BDDF-2E577F0739D9|5B249B1C-988B-4A29-9DE9-F0DA15952324_search_myemail@account.com_NS917b59a8102eef0c", status=failed, reason="bucket archiving failed"
03-12-2018 13:37:09.286 +0000 ERROR CacheManager - action=upload, cacheId="ra|idx_myindex~6~693AB0FF-CF92-435C-BDDF-2E577F0739D9|5B249B1C-988B-4A29-9DE9-F0DA15952324_search_myemail@account.com_NS6f3ad8ed48f3e0f0", status=failed, reason="bucket archiving failed"
03-12-2018 13:37:09.286 +0000 ERROR CacheManager - failed to save download state to path=/opt/splunk/var/lib/splunk/idx_myindex/summary/9_693AB0FF-CF92-435C-BDDF-2E577F0739D9/5B249B1C-988B-4A29-9DE9-F0DA15952324/search_myemail@account.com_NS6f3ad8ed48f3e0f0/cachemanager_local.json
03-12-2018 13:37:09.286 +0000 ERROR CacheManager - action=upload, cacheId="ra|idx_myindex~9~693AB0FF-CF92-435C-BDDF-2E577F0739D9|5B249B1C-988B-4A29-9DE9-F0DA15952324_search_myemail@account.com_NS6f3ad8ed48f3e0f0", status=failed, reason="bucket archiving failed"
03-12-2018 13:37:09.286 +0000 ERROR CacheManager - failed to save download state to path=/opt/splunk/var/lib/splunk/idx_myindex/summary/8_693AB0FF-CF92-435C-BDDF-2E577F0739D9/5B249B1C-988B-4A29-9DE9-F0DA15952324/search_myemail@account.com_NS917b59a8102eef0c/cachemanager_local.json

What can be the cause?

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...