Skip to main content

Integrations

Failed to Start KV Store Process Error Occurs

Use the following steps to resolve this issue:

  1. Open the CLI of the search head and go to the Splunk bin directory or cd to /opt/splunk/bin and type ./splunk for all of the following commands.

  2. To see the status of the KV store, enter the following command:

    # splunk show kvstore-status -auth <user_name>:<password>.

  3. Use the following command to check the FQDN of your server:

    # hostname - fqdn

  4. Copy the FQDN.

  5. Create a new SSL certificate in the /opt/splunk/etc/auth directory and run the following command to create an SSL certificate for this server using the FQDN that you copied:

    (Run this command if the search head is in a distributed environment and not in a cluster environment.)

    # splunk createssl server-cert 3072 -d /opt/splunk/etc/auth -n server -c <FQDN>

    You will see that one new .pem file has been generated.

  6. Restart Splunk to load the certificate.

  7. Check the status of kvstore again using the following command:

    #./splunk show kvstore-status -auth <user_name>:<password>

    The status should show as ready.

    After you perform these steps, when you log back into Splunk, the error messages will no longer display and your app will most likely be working again.