Splunk Enterprise

Error: KV Store process terminated abnormally

sudhir7
Explorer

Error on the search head: KV Store process terminated abnormally.

I have verified the expiry of the server.pem file and permissions of the file E:\Program Files\Splunk\var\lib\splunk\kvstore\mongo\journal\lsn. Everything looks good.

But the error keeps coming up.

Has anyone else faced a similar situation? Are there any configurational settings I am missing?

Labels (2)
Tags (1)

thambisetty
SplunkTrust
SplunkTrust

are you still facing problem?

————————————
If this helps, give a like below.
0 Karma
Get Updates on the Splunk Community!

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...