https://community.splunk.com/t5/Splunk-Enterprise/How-to-fix-this-Splunk-Error-Connection-closed-by-peer/m-p/609571#M13645 <P>Hello everyone,</P> <P>I have 1 search head and 3 indexes with a index cluster, it worked fine until yesterday, today I can't search event, then I found this event from splunkd.log</P> <PRE><SPAN class=""><SPAN class="">08-16</SPAN>-2022</SPAN> <SPAN class="">13:23:10.727</SPAN><SPAN> +</SPAN><SPAN class="">0800</SPAN> <SPAN class="">ERROR</SPAN> <SPAN class="">HttpListener</SPAN><SPAN> [</SPAN><SPAN class="">175497</SPAN> <SPAN class="">TcpChannelThread</SPAN><SPAN>] </SPAN><SPAN class="">-</SPAN> <SPAN class="">Exception</SPAN> <SPAN class="">while</SPAN> <SPAN class="">processing</SPAN> <SPAN class="">request</SPAN> <SPAN class="">from</SPAN> <SPAN class="">10.20.5.10:38210</SPAN> <SPAN class="">for</SPAN> <SPAN class="">/services/streams/search</SPAN><SPAN>?</SPAN><SPAN class="">sh_sid=rt_scheduler__admin_U0EtQWNjZXNzUHJvdGVjdGlvbg__RMD53730174ad49bc45c_at_1660627323_2982:</SPAN> <SPAN class="">Connection</SPAN> <SPAN class="">closed</SPAN> <SPAN class="">by</SPAN> <SPAN class="">peer</SPAN></PRE> <P>&nbsp;10.20.5.10 is search head server,</P> <P>What should I do?</P> <P>Thanks</P> Tue, 16 Aug 2022 13:06:56 GMT zhenqi 2022-08-16T13:06:56Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-fix-this-Splunk-Error-Connection-closed-by-peer/m-p/609571#M13645 <P>Hello everyone,</P> <P>I have 1 search head and 3 indexes with a index cluster, it worked fine until yesterday, today I can't search event, then I found this event from splunkd.log</P> <PRE><SPAN class=""><SPAN class="">08-16</SPAN>-2022</SPAN> <SPAN class="">13:23:10.727</SPAN><SPAN> +</SPAN><SPAN class="">0800</SPAN> <SPAN class="">ERROR</SPAN> <SPAN class="">HttpListener</SPAN><SPAN> [</SPAN><SPAN class="">175497</SPAN> <SPAN class="">TcpChannelThread</SPAN><SPAN>] </SPAN><SPAN class="">-</SPAN> <SPAN class="">Exception</SPAN> <SPAN class="">while</SPAN> <SPAN class="">processing</SPAN> <SPAN class="">request</SPAN> <SPAN class="">from</SPAN> <SPAN class="">10.20.5.10:38210</SPAN> <SPAN class="">for</SPAN> <SPAN class="">/services/streams/search</SPAN><SPAN>?</SPAN><SPAN class="">sh_sid=rt_scheduler__admin_U0EtQWNjZXNzUHJvdGVjdGlvbg__RMD53730174ad49bc45c_at_1660627323_2982:</SPAN> <SPAN class="">Connection</SPAN> <SPAN class="">closed</SPAN> <SPAN class="">by</SPAN> <SPAN class="">peer</SPAN></PRE> <P>&nbsp;10.20.5.10 is search head server,</P> <P>What should I do?</P> <P>Thanks</P> Tue, 16 Aug 2022 13:06:56 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-fix-this-Splunk-Error-Connection-closed-by-peer/m-p/609571#M13645 zhenqi 2022-08-16T13:06:56Z