11-22-2006 10:56:29.159 INFO loader - Splunkd starting (build 13212). 11-22-2006 10:56:29.159 INFO loader - System info: Linux, splunk02, 2.6.9-34.ELsmp, #1 SMP Thu Mar 9 06:23:23 GMT 2006, x86_64. 11-22-2006 10:56:29.160 INFO loader - Getting configuration data from: /opt/splunk/etc/myinstall/splunkd.xml 11-22-2006 10:56:29.161 INFO loader - SPLUNK_MODULE_PATH environment variable not found - defaulting to /opt/splunk/etc/modules 11-22-2006 10:56:29.161 INFO loader - loading modules from /opt/splunk/etc/modules 11-22-2006 10:56:29.161 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/batchfileloader 11-22-2006 10:56:29.161 INFO splunklogger - Module /opt/splunk/etc/modules/input/batchfileloader loaded 11-22-2006 10:56:29.161 INFO loader - Processing Module ----> /opt/splunk/etc/modules/output 11-22-2006 10:56:29.161 INFO loader - Processing Module ----> /opt/splunk/etc/modules/output/TCP 11-22-2006 10:56:29.163 INFO splunklogger - Module /opt/splunk/etc/modules/output/TCP loaded 11-22-2006 10:56:29.163 INFO splunklogger - Module /opt/splunk/etc/modules/output loaded 11-22-2006 10:56:29.163 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input 11-22-2006 10:56:29.163 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/FIFO 11-22-2006 10:56:29.164 INFO splunklogger - Module /opt/splunk/etc/modules/input/FIFO loaded 11-22-2006 10:56:29.164 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/ODBC 11-22-2006 10:56:29.165 INFO splunklogger - Module /opt/splunk/etc/modules/input/ODBC loaded 11-22-2006 10:56:29.165 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/TCP 11-22-2006 10:56:29.166 INFO splunklogger - Module /opt/splunk/etc/modules/input/TCP loaded 11-22-2006 10:56:29.166 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/UDP 11-22-2006 10:56:29.167 INFO splunklogger - Module /opt/splunk/etc/modules/input/UDP loaded 11-22-2006 10:56:29.167 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/batchfile 11-22-2006 10:56:29.185 INFO splunklogger - Module /opt/splunk/etc/modules/input/batchfile loaded 11-22-2006 10:56:29.185 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/log4jTCP 11-22-2006 10:56:29.185 INFO splunklogger - Module /opt/splunk/etc/modules/input/log4jTCP loaded 11-22-2006 10:56:29.185 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/splunkTCP 11-22-2006 10:56:29.185 INFO splunklogger - Module /opt/splunk/etc/modules/input/splunkTCP loaded 11-22-2006 10:56:29.185 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/syslogFIFO 11-22-2006 10:56:29.185 INFO splunklogger - Module /opt/splunk/etc/modules/input/syslogFIFO loaded 11-22-2006 10:56:29.185 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/syslogUDP 11-22-2006 10:56:29.185 INFO splunklogger - Module /opt/splunk/etc/modules/input/syslogUDP loaded 11-22-2006 10:56:29.185 INFO loader - Processing Module ----> /opt/splunk/etc/modules/input/tailfile 11-22-2006 10:56:29.187 INFO splunklogger - Module /opt/splunk/etc/modules/input/tailfile loaded 11-22-2006 10:56:29.188 INFO splunklogger - Module /opt/splunk/etc/modules/input loaded 11-22-2006 10:56:29.188 INFO loader - Processing Module ----> /opt/splunk/etc/modules/internal 11-22-2006 10:56:29.188 INFO loader - Processing Module ----> /opt/splunk/etc/modules/internal/distributed 11-22-2006 10:56:29.189 INFO splunklogger - Module /opt/splunk/etc/modules/internal/distributed loaded 11-22-2006 10:56:29.189 INFO loader - Processing Module ----> /opt/splunk/etc/modules/internal/freeprocessors 11-22-2006 10:56:29.189 INFO splunklogger - Module /opt/splunk/etc/modules/internal/freeprocessors loaded 11-22-2006 10:56:29.190 INFO loader - Processing Module ----> /opt/splunk/etc/modules/internal/scheduler 11-22-2006 10:56:29.192 INFO splunklogger - Module /opt/splunk/etc/modules/internal/scheduler loaded 11-22-2006 10:56:29.192 INFO splunklogger - Module /opt/splunk/etc/modules/internal loaded 11-22-2006 10:56:29.192 INFO loader - Processing Module ----> /opt/splunk/etc/modules/distributedSearch 11-22-2006 10:56:29.194 INFO splunklogger - Module /opt/splunk/etc/modules/distributedSearch loaded 11-22-2006 10:56:29.194 INFO loader - Getting common configuration data from: /opt/splunk/etc/common.xml 11-22-2006 10:56:29.194 INFO loader - Writing out composite configuration file: /opt/splunk/var/run/splunk/composite.xml 11-22-2006 10:56:29.203 INFO loader - Writing out composite libmap file: /opt/splunk/var/run/splunk/compositelibmap.xml 11-22-2006 10:56:29.226 WARN GenericCleaner - Couldn't find 'removeDataWhenParsed' in config data for DataCleanProcessor defaulting to false. 11-22-2006 10:56:29.229 WARN databasePartitionPolicy - Unable to get metadata for index ... using max possible time bounds 11-22-2006 10:56:29.291 WARN GenericCleaner - Couldn't find 'removeDataWhenParsed' in config data for DataCleanProcessor defaulting to false. 11-22-2006 10:56:29.295 WARN GenericCleaner - Couldn't find 'removeDataWhenParsed' in config data for DataCleanProcessor defaulting to false. 11-22-2006 10:56:29.300 WARN GenericCleaner - Couldn't find 'removeDataWhenParsed' in config data for DataCleanProcessor defaulting to false. 11-22-2006 10:56:29.302 WARN databasePartitionPolicy - Unable to get metadata for index ... using max possible time bounds 11-22-2006 10:56:29.304 WARN GenericCleaner - Couldn't find 'removeDataWhenParsed' in config data for DataCleanProcessor defaulting to false. 11-22-2006 10:56:29.316 WARN GenericCleaner - Couldn't find 'removeDataWhenParsed' in config data for DataCleanProcessor defaulting to false. 11-22-2006 10:56:29.322 INFO LicenseManager - Initializing 11-22-2006 10:56:29.323 INFO LicenseManager - Looking for bytequotaprocessor... 11-22-2006 10:56:29.327 INFO LicenseManager - Audit: quotaExceededCount=0, lastExceedDate=0, peak=2708288438, rolloverCount=26, totalBytes=5424833259 [ig3Nq//Mgb lDHi80a3oLVkqzSOY=] 11-22-2006 10:56:29.345 INFO LicenseManager - Already initialized. 11-22-2006 10:56:29.345 INFO TcpInputProc - using queueSize 1000 11-22-2006 10:56:29.469 DEBUG DirMonitor - Adding in dir cache /opt/splunk/var/spool/dirmoncache/ 11-22-2006 10:56:29.591 WARN TailingProcessor - Could not stat: '/opt/splunk/var/log/splunk/web_access.log' errno: 2 11-22-2006 10:56:29.591 WARN TailingProcessor - Could not stat: '/opt/splunk/var/log/splunk/web_service.log' errno: 2 11-22-2006 10:56:29.593 INFO LicenseManager - Already initialized. 11-22-2006 10:56:29.595 INFO LicenseManager - Already initialized. 11-22-2006 10:56:29.595 INFO LicenseManager - Already initialized. 11-22-2006 10:56:29.596 INFO LicenseManager - Already initialized. 11-22-2006 10:56:29.596 INFO DistributedMgr - Initializing 11-22-2006 10:56:29.596 INFO DistributedMgr - Starting heartbeat - frequency = 2 11-22-2006 10:56:29.596 INFO DistributedMgr - Setting up heartbeat thread 11-22-2006 10:56:29.596 INFO DistributedMgr - Set TTL to 1 11-22-2006 10:56:29.596 INFO DistributedMgr - Starting peer discovery thread 11-22-2006 10:56:29.596 INFO DistributedMgr - Setting up peer discovery thread 11-22-2006 10:56:29.598 INFO DistributedMgr - Initialized 11-22-2006 10:56:29.605 INFO DistributedMgr - Peer splunk - https://172.16.190.133:8089 added to active list 11-22-2006 10:56:29.613 INFO DistributedMgr - Peer splunk01 - https://172.16.190.131:8089 added to active list 11-22-2006 10:56:29.613 INFO loader - Running.... 11-22-2006 10:56:29.614 DEBUG DirMonitor - ProcessingDir : /opt/splunk/var/spool/dirmoncache/processing 11-22-2006 10:56:31.444 INFO DistributedMgr - New peer discovered: splunk https://172.16.190.133:8089 11-22-2006 10:57:31.162 DEBUG ThruputProcessor - Thruput currently running at 157.98 byte/sec (0.15 kbyte/sec) Average Thruput : 0.15 kbyte/sec Approximate k proc