I've just moved a backup from May 2016 to my thaweddb volume on one of my stand-alone Splunk indexers. We have never restored anything from this tier before at my company so there is no process to guide me and I've been encountered some errors. I've started by trying to rebuild a bucket for one of the indexes and while it seemed to completed I noticed the following messages :
No bootstrap configuration available for: \etc
WARN Fsck - Not loading indexes.conf; will proceed with all defaults
WARN ServerConfig - No value found for listenOnIPv6 setting. Using the default value of "no"
WARN ServerConfig - No value found for connectUsingIpVersion setting. Using the default value of "auto"
ERROR ServerConfig - Found no server name in server.conf. Please set it. Will attempt to use default for now.
WARN ServerConfig - No web configuration present, assuming defaults.
WARN ServerConfig - No SSL configuration present, assuming SSL using defaults.
ERROR IndexConfig - stanza=default Required parameter=blockSignatureDatabase not configured
WARN BucketBuilder - Could not read indexes.conf, using bucketRebuildMemoryHint=33554432 (MB=32.000000)
INFO BucketBuilder - Could not parse server/[diskUsage]/minFreeSpace, defaulting to 2048
INFO Fsck - (entire bucket) Rebuild for bucket='f:\thaweddb\perf_1\db_1461567599_1461481200_3127' took 132.6 seconds
↧