cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
duncandka
Engager
Member since: ‎12-11-2019
‎07-29-2021
Community Statistics
Posts 3
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎12-11-2019
View All

Unable to report a bug against 8.2.1 Manifest

by in Splunk Enterprise
‎07-29-2021 02:14 AM
‎07-29-2021 02:14 AM
Hi, I would like to highlight an anomaly with Enterprise 8.2.1 (and maybe lower versions?), within Splunk Enterprise 8.2.1, this is pre-loaded with 'splunk_essentials_8_2' version 0.3.0, the Apps manager suggests an update to version 1.0.0 When this happens and Splunk is restarted the following warning File '/opt/splunk/etc/apps/splunk_essentials_8_2/default/app.conf' changed. In other words it don't like version 1.0.0 in the party manifest, and the warning becomes tiresome. It may well have been reported, but here is another voice reporting it. I would have raised this as a user case, but my lowly login does not allow me to raise a case. ... View more
Labels

Installing Splunk 8.1.0 - Ubuntu 20.4 warning mess...

by in Splunk Enterprise
‎11-17-2020 09:59 AM
1 Karma
‎11-17-2020 09:59 AM
1 Karma
Hi, Installing Enterprise 8.1.0 on Ubuntu 20.4 when unpacking get the following message. cp: cannot stat '/opt/splunk/etc/regid.2001-12.com.splunk-Splunk-Enterprise.swidtag': No such file or directory Where as, it is directly under /opt/splunk Duncan     ... View more
Labels

Re: Why is deployment client not picking up change...

by in Deployment Architecture
‎12-11-2019 11:52 AM
‎12-11-2019 11:52 AM
Hi, I had this issue and the answers given all hold merit and should be followed/checked. However, I would like to add 1 other check, and this caught my team out for awhile. Check on the deployment server, splunkd.log for 'duplicated' GUID messages, (I can't remember the exact error message, its been a awhile!). Our problem was caused by 'designers' and jump server builds pushing same Splunk config builds on new builds. If you do see this Error in Splunkd.log, then, (it will provide hostnames/IP Addresses) log onto those servers, stop Splunk. Delete "/opt/splunk(forwarder)/etc/instance.cfg" - on both servers. Restart splunk, duplicated problem disappears as new GUID is created per machine, (deployment server is now happy), and any apps are then pushed down. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-29-2021 06:00 AM
Karma from
View All