Refine your search:

I just upgraded from 4.0 to 4.1 and am seeing messages that the indexprocessor was not initialized on startup. How can I fix this?

asked 05 Apr '10, 18:56

Alan%20Bradley's gravatar image

Alan Bradley
8606733
accept rate: 100%

edited 12 May '10, 17:27

Justin%20Grant's gravatar image

Justin Grant
1.5k6739


One Answer:

If you are seeing this message in $SPLUNK_HOME/var/log/splunkd.log -

04-05-2010 13:45:21.177 ERROR FTHelper - IndexProcessor instance is null, assuming 3.X fish bucket exists, will lazy migrate

And the following error in the search app when you log in to Splunk

There is no query runner registered

This is likely because the migration script from an earlier version of Splunk did not complete correctly. To resolve, you need to get the correct version of $SPLUNK_HOME/etc/myinstall/splunkd.xml in place and restart Splunk. if you download a tarball package of Splunk, and extract $SPLUNK_HOME/etc/myinstall/splunkd.xml.cfg-default - that's the file you need.

Installation instructions -

  • stop splunk
  • cd /opt/splunk/etc/myinstall/
  • mv splunkd.xml splunkd.xml.4x
  • download the extracted file into /opt/splunk/etc/myinstall
  • gunzip splunkd.xml.gz
  • verify permissions and ownership of splunkd.xml (match splunkd.xml.4x)
  • start splunk

If you also take a look in $SPLUNK_HOME/var/log/splunk/migration.log, you'll see confirmation of the migration error

link

answered 05 Apr '10, 19:15

Mick's gravatar image

Mick ♦
4.0k1327
accept rate: 52%

Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×97

Asked: 05 Apr '10, 18:56

Seen: 817 times

Last updated: 12 May '10, 17:27

Copyright © 2005-2012 Splunk, Inc. All rights reserved.