topic Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990 in Deployment Architecture

The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

jackiewkc — Fri, 12 Dec 2014 14:07:31 GMT

Does anyone know how this can be fixed? Thanks.

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

kml_uvce — Fri, 12 Dec 2014 14:14:42 GMT

check multisite and site parameters are properly used in server.conf
http://docs.splunk.com/Documentation/Splunk/6.2.0/Admin/Serverconf

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

jackiewkc — Mon, 28 Sep 2020 18:26:23 GMT

Thanks a lot for the quick reply. Unfortunately I am unable to figure out why this is happening.

In server.conf on the master, I have this:

[clustering]
mode = master
multisite = true
available_sites = site1, site2

On the two search heads I have got, I have this in server.conf:

[clustering]
master_uri = https://master01:8990/
site_replication_factor = origin:2, total:3
site_search_factor = origin:1, total:2
multisite = true
site = site1

Any idea?

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

dxu_splunk — Fri, 12 Dec 2014 21:17:17 GMT

the site= line should go under the [general] stanza, try moving it there

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

svasan_splunk — Mon, 28 Sep 2020 18:26:31 GMT

jackiewkc,

Did the master start up okay? I suspect there is probably an error in the log saying clustering was not initialized on the master. The master needs a 'site=...' attribute too which is missing in your config. The site attribute should be under [general] stanza as dxu pointed out. Also site_replication_factor and site_search_factor are need on the master not the searchheads.

See: http://docs.splunk.com/Documentation/Splunk/6.2.0/Indexer/Multisiteconffile

The cli commands for setting up indexer clustering will put the entries under the right stanza. See: http://docs.splunk.com/Documentation/Splunk/latest/Indexer/MultisiteCLI

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

jackiewkc — Sat, 13 Dec 2014 16:46:04 GMT

Thanks. Adding site=1 to the master and then restarting it fixed the issue.

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

jackiewkc — Sat, 13 Dec 2014 16:46:47 GMT

Hi, seems like the the issue is with missing site= for the master. This is fixed now. Thanks.

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

mgonter_splunk — Mon, 01 Jun 2015 22:08:31 GMT

You need to have multisite = true on the search head. It's confusing based on the server.conf.spec because it says it used to inilizae the master. However, this needs to be on your search heads and Cluster Master. Not your indexers. The Site= Site1 needs to be on the indexers. But the search head config needs the following:

[general]
site = site1

[clustering]
multisite = true
master_uri = https:/A.IP.Address:8089
mode = searchhead

http://docs.splunk.com/Documentation/Splunk/6.2.3/Indexer/Multisiteconffile

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

lakshman239 — Fri, 16 Sep 2016 07:45:00 GMT

Pls ensure that mutlisite = true is entered in [general] stanza in the Cluster Master and restart the Cluster Master.

Re: The searchhead is unable to update the peer information. Error = 'Master has multisite enabled but it is missing the 'multisite' attribute' for master=https://127.0.0.1:8990

jkat54 — Wed, 29 Mar 2017 10:57:49 GMT

you meant site=site1 i assume. site=1 is invalid.