Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Index creation using default.yml is no longer working in splunk images > 9.0.7. #647

Open
pauljmelia opened this issue Feb 14, 2024 · 0 comments

Comments

@pauljmelia
Copy link

Index creation using default.yml is no longer working in splunk images > 9.0.7.

I'm running Splunk in Docker Desktop 4.27.2 on Windows 11.

The attached docker-compose and default files work perfectly in splunk 9.0.7

docker-compose.txt
default.txt

as can be seen from this log file:
splunkd.9.0.7.log

In 9.0.8 onwards the files in the various monitored folders are no longer picked up, i.e. they paths are listed in Settings -> Data Inputs -> Files & Directories, but the Number of Files is blank and the indices are not created at all.

Attached is a log from starting up the latest tag:
splunkd.latest.log

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant