splunk / splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments
353 stars 185 forks source link

Don't hammer splunkd with restart #831

Closed hendolim closed 4 months ago

hendolim commented 4 months ago

There's a long time bug in splunkd where it needs time to properly ShutDown multiple components. This usually manifest as failing to bind to KVStore port 8191: https://community.splunk.com/t5/Knowledge-Management/ERROR-kvstore-port-8191-port-is-already-bound-Splunk-needs-to/m-p/293324

In ansible, we need to space out the retry when issuing restart command to give it time, otherwise the consecutive try will keep failing due to this.