07-18-2018 21:20:40.725 +0000 WARN X509Verify - X509 certificate (O=SplunkUser,CN=SplunkServerDefaultCert) should not be used, as it is issued by Splunk's own default Certificate Authority (CA). This puts your Splunk instance at very high-risk of the MITM attack. Either commercial-CA-signed or self-CA-signed certificates must be used; see:
07-18-2018 21:20:40.736 +0000 INFO WatchedFile - Will begin reading at offset=392049 for file='/welldata/splunk/var/log/introspection/disk_objects.log'.
07-18-2018 21:20:40.740 +0000 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/welldata/splunk/var/log/introspection/http_event_collector_metrics.log'.
07-18-2018 21:20:40.799 +0000 ERROR TcpOutputProc - LightWeightForwarder/UniversalForwarder not configured. Please configure outputs.conf.
07-18-2018 21:20:40.967 +0000 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/welldata/splunk/var/log/splunk/btool.log'.
07-18-2018 21:20:40.970 +0000 INFO WatchedFile - Will begin reading at offset=3894 for file='/welldata/splunk/var/log/splunk/splunkd-utility.log'.
07-18-2018 21:20:40.977 +0000 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file='/welldata/splunk/var/log/splunk/searchhistory.log'.
07-18-2018 21:20:40.981 +0000 INFO WatchedFile - Will begin reading at offset=238867 for file='/welldata/splunk/var/log/splunk/splunkd_access.log'.
07-18-2018 21:20:40.998 +0000 INFO WatchedFile - Will begin reading at offset=3141787 for file='/welldata/splunk/var/log/splunk/audit.log'.
07-18-2018 21:20:41.001 +0000 INFO WatchedFile - Will begin reading at offset=933 for file='/welldata/splunk/var/log/splunk/conf.log'.
07-18-2018 21:20:41.020 +0000 INFO WatchedFile - Will begin reading at offset=2076287 for file='/welldata/splunk/var/log/splunk/health.log'.
07-18-2018 21:20:43.337 +0000 INFO IntrospectionGenerator:resource_usage - RU_main - I-data gathering (Resource Usage) starting; period=10s
07-18-2018 21:20:43.349 +0000 INFO IntrospectionGenerator:resource_usage - RU_main - I-data gathering (IO Statistics) starting; interval=60s
07-18-2018 21:20:46.023 +0000 WARN TailReader - Could not send data to output queue (parsingQueue), retrying...
07-18-2018 21:20:48.590 +0000 INFO ExecProcessor - message from "python /welldata/splunk/etc/apps/splunk_monitoring_console/bin/dmc_config.py" Cannot detect SHC status because of License Restriction. Will not disable DMC.
07-18-2018 21:21:10.392 +0000 INFO ScheduledViewsReaper - Scheduled views reaper run complete. Reaped count=0 scheduled views
07-18-2018 21:52:08.785 +0000 WARN TcpInputProc - Stopping all listening ports. Queues blocked for more than 300 seconds
07-18-2018 21:52:08.785 +0000 INFO TcpInputProc - Stopping IPv4 port 9997
07-18-2018 21:59:59.999 +0000 INFO ExecProcessor - setting reschedule_ms=3600002, for command=python /welldata/splunk/etc/apps/splunk_instrumentation/bin/instrumentation.py
07-18-2018 23:00:00.003 +0000 INFO ExecProcessor - setting reschedule_ms=3599997, for command=python /welldata/splunk/etc/apps/splunk_instrumentation/bin/instrumentation.py
07-19-2018 00:00:00.000 +0000 INFO ExecProcessor - setting reschedule_ms=3600000, for command=python /welldata/splunk/etc/apps/splunk_instrumentation/bin/instrumentation.py
07-19-2018 00:00:00.000 +0000 INFO ExecProcessor - setting reschedule_ms=86400000, for command=python /welldata/splunk/etc/apps/splunk_instrumentation/bin/schedule_delete.py
07-19-2018 00:00:00.945 +0000 INFO LMStackMgr - should rollover=true because _lastRolloverTime=1531872000 lastRolloverDay=1531872000 snappedNow=1531958400
07-19-2018 00:00:00.945 +0000 INFO LMStackMgr - finished rollover, new lastRolloverTime=1531958400
07-19-2018 00:00:28.945 +0000 INFO LMSlaveInfo - Detected that masterTimeFromSlave(Wed Jul 18 23:59:27 2018) < lastRolloverTime(Thu Jul 19 00:00:00 2018), meaning that the master has already rolled over. Ignore slave persisted usage.
07-19-2018 01:59:59.999 +0000 INFO ExecProcessor - setting reschedule_ms=3600002, for command=python /welldata/splunk/etc/apps/splunk_instrumentation/bin/instrumentation.py
07-19-2018 03:00:00.001 +0000 INFO ExecProcessor - setting reschedule_ms=3599999, for command=python /welldata/splunk/etc/apps/splunk_instrumentation/bin/instrumentation.py
07-19-2018 03:01:00.599 +0000 WARN TelemetryHandler - 1531872000.000000
↧