topic Re: Search head is not communicating with its peer(Indexer) in Getting Data In

Search head is not communicating with its peer(Indexer)

ashishlal82 — Fri, 12 Jan 2018 14:51:00 GMT

Error [00000080] Instance name "XXX.XXX.XXX.XXX:8089" REST interface to peer is taking longer than 5 seconds to respond on https. Peer may be over subscribed or misconfigured. Check var/log/splunk/splunkd_access.log on the peer Last Connect Time:2018-01-12T09:46:13.000-05:00; Failed 10 out of 10 times.

Re: Search head is not communicating with its peer(Indexer)

mayurr98 — Fri, 12 Jan 2018 14:54:12 GMT

have a look at this
https://answers.splunk.com/answers/451570/why-does-my-indexer-stop-responding-to-search-head.html

Let me know if this helps you!

Re: Search head is not communicating with its peer(Indexer)

ashishlal82 — Fri, 12 Jan 2018 15:15:44 GMT

I don't think that is the issue. I have 2 indexers. One of the indexer is working fine and is connected to search head but the other is not.

Re: Search head is not communicating with its peer(Indexer)

nickhills — Fri, 12 Jan 2018 15:44:13 GMT

Assuming no Splunk config changes, could your indexer be bogged down with something else?
From the searchhead try:
curl -k -u admin:changeme https://your_missing_indexer:8089/services/server/info

If you get no response, check the normal things, such as "is splunk actually running", server load, network etc etc

Aldo take a look for errors in /opt/splunk/var/log/splunk/splunkd.log?

Re: Search head is not communicating with its peer(Indexer)

Amulya888 — Tue, 09 Oct 2018 19:57:29 GMT

I have the similar issue.
Please give us the solution for this.

Re: Search head is not communicating with its peer(Indexer)

dmjenso — Fri, 18 Jan 2019 09:04:32 GMT

I had this issue and I had to distribute the public SSL key from the search head to the peer (indexer).

Settings > Distributed Search > Search Peers >

click on the peer in question and enter the admin/password