Here are the error logs.
08-07-2017 05:44:10.836 +0000 INFO DatabaseDirectoryManager - idx=wineventlog Writing a bucket manifest in hotWarmPath=‘/usr/local/splunk/var/lib/splunk/wineventlog/db’, pendingBucketUpdates=0 . Reason=‘Refreshing manifest at start-up.’
08-07-2017 05:44:10.837 +0000 INFO DatabaseDirectoryManager - idx=winevents Writing a bucket manifest in hotWarmPath=‘/usr/local/splunk/var/lib/splunk/winevents/db’, pendingBucketUpdates=0 . Reason=‘Refreshing manifest at start-up.’
08-07-2017 05:44:10.837 +0000 FATAL IndexerService - One or more indexes could not be initialized. Cannot disable indexes on a clustering slave.
↧