KV store lookups are failing with the following error:
Error in 'inputlookup' command: External command based lookup 'kvstore_lookup' is not available because KV Store initialization has failed.
Verified no orphaned mongod.lock file or firewall port issues per [Splunk Answer 208349][1]. Attempted manual restart of mongod with
`./mongod --fork --logpath $SPLUNK_HOME/var/log/splunk/test_mongodb.log
about to fork child process, waiting until server is ready for connections.
forked process: 4234
ERROR: child process failed, exited with error number 100`
Searching for above error, noted a post on StackOverflow where permissions were a problem, so I verified permissions. Mongod still did not start.
[1]: https://answers.splunk.com/answers/208349/why-am-i-getting-kv-store-error-external-command-b.html
↧