Why am I getting a "500 Internal Server Error" trying to upgrade Splunk DB...
When I try to update to 2.3.0 I get an error:> 500 Internal Server Error>> Return to Splunk home page>> View more information about your> request (request ID => 57a858aadd43f4908)...
View ArticleWhy did our Splunk 6.4.x instance on Linux downgrade back to 6.1.3 two weeks...
So we upgraded Splunk 6.1.3 to latest 6.4 version. This is a Linux server. Things worked fine for about 2 weeks with new version. This morning, Splunk was down and after bringing it back up looks like...
View ArticleWhat to do first: Cluster Indexers, then Upgrade Linux, or upgrade Linux,...
We have 2 indexers (one site) that are running on Redhat 6.2 that we want to upgrade to 6.7 for security reasons. We also want to cluster them. Should we cluster first, then upgrade the OS on one...
View ArticleLocal Yum Repo
I'd like to create a local yum repository for my organization with semi-custom RPM spec files to handle the upgrade procedure for Splunk Universal Forwarders (and Splunk Enterprise to some extent). In...
View ArticleHow to upgrade Splunk forwarders from a deployment server installed on a...
Hi, I have set up a deployment server with a test app directory under etc/deployment-app along with a default inputs.conf. It also has a local folder and an app.conf auto generated file. Then I have a...
View ArticleUnable to start Splunk on Windows after upgrading - "Splunkd: Unable to start...
We recently updated from Windows Server 2008 SP2 to 2008 R2 SP1 so we could upgrade from Splunk version 6.0 to 6.4. Now we are unable to start Splunk and we notice that the application isn't in the...
View ArticleWhere do I find Splunk upgrade files (tar, iso,..)?
Hi Dears, I am new to Splunk and I need to upgrade it from Version 6.2 to 6.4.2 or 6.4.3, whatever is the latest. I have gone through the manuals and I can only find the procedure of the upgrade, which...
View ArticleWhat are the major changes between Splunk version 6.1.9 and 6.4.3?
I was looking to upgrade my current version of splunk (6.1.9) to the latest version (6.4.3). Before that I just want to know if there are any known bugs in the latest version. Also it would be great if...
View ArticleHow to upgrade the shared search head pooling from Splunk 6.0.3 to 6.2.1?
Hi All, Ours is a distributed environment and I am planning to upgrade Splunk search heads which are currently running with the version 6.0.3 to 6.2.1. to sync the version with other Splunk components...
View ArticleWhy does Splunk DB Connect not load after upgrade install to 2.3.1?
Upgraded from version 2.1.3 to 2.3.1 and now the add-on will not load. Just displays blank page.
View ArticleWhy can't I re-enable or re-add one member of my search head cluster after...
I am following the upgrade instructions at http://docs.splunk.com/Documentation/Splunk/6.5.0/Installation/UpgradeyourdistributedSplunkEnterpriseenvironment like so: **Upgrade the search heads** 1....
View ArticleHow can I regenerate my package manifest file?
Note: This question is about the package manifest file (NOT the bucket manifest file). Scenario: I accidentally deleted my package manifest files after upgrading between versions. e.g. Upgraded from...
View ArticleWhy have glass table contents disappeared after upgrading Splunk IT Service...
Hi, just upgraded to ITSI 2.4.0 (from 2.2.0) and the content of all the saved glass tables have disappeared. The glass tables are there, but none of the saved elements (background image, KPIs, etc) are...
View ArticleSearches are stuck at 'finalizing job' after upgrade to 6.5
I upgraded Splunk on my linux server to 6.5 and after that no searches are getting completed. Not even index=_internal Search job inspector also doesnt load. All the jobs are getting stuck at...
View ArticleWhy can't I re-enable or re-add one member of my search head cluster after...
I am following the upgrade instructions at http://docs.splunk.com/Documentation/Splunk/6.5.0/Installation/UpgradeyourdistributedSplunkEnterpriseenvironment like so: **Upgrade the search heads** 1....
View ArticleWhy are searches stuck at "finalizing job" after upgrade to 6.5.0?
I upgraded Splunk on my linux server to 6.5.0 and after that no searches are getting completed. Not even index=_internal Search job inspector also doesn't load. All the jobs are getting stuck at...
View ArticleUpgraded universal forwarder from 5.2 to 6.5.0. Is it typical to receive a...
I upgraded my Windows universal forwarder from 5.2 to 6.5.0. All I did was grab the installer from download and install on top of the older config. I am getting a fatal error on the...
View ArticleHow to resolve error "Could not create path ... appearing in indexes.conf:...
I am in the progress of attempting to migrate an on premise Splunk instance to the cloud. I have a new instance all set up in AWS. Running Splunk Enterprise 6.5.0. My old instance of Splunk was running...
View ArticleWe are currently running Splunk 5.0.4. What are the recommended actions to...
Hi I'm currently running Splunk version 5.0.4 across 2 servers. One server is acting as the indexer & search head. The other is the heavy forwarder & deployment server. These are running on...
View ArticleIs there any way to get a Splunk version upgrade history report?
I have upgraded Splunk enterprise from 6.4 to 6.5 version today. I looking for a command to check when the last upgrade happened from 6.3 to 6.4 with date and time. I have old logs, but I couldn't find...
View Article