topic Splunk Management Console - Error [subsearch] Rest Processor ... https://127.0.0.1:8089 in Getting Data In

Splunk Management Console - Error [subsearch] Rest Processor ... https://127.0.0.1:8089

rewritex — Wed, 12 Apr 2017 16:10:56 GMT

I have an indexing cluster and this error is when I'm working from the Management Console on the Master.
I go to: Indexing -> Indexes and Volumes -> Index Detail: Deployment (this error is throughout the console)
I am thinking I need to modify the URI within the alert and change it from https://127.0.0.1:8089 to my master IP?
Any advice would be appreciated ... Thanks! ~Sean

Re: Splunk Management Console - Error [subsearch] Rest Processor ... https://127.0.0.1:8089

esix_splunk — Wed, 12 Apr 2017 16:43:00 GMT

I'd venture to say that you are working in a distributed environment and have the wrong role configured for your Cluster Master Node.
Go through your configuration for your Management Console and remove the Indexer role from your Cluster Master instance.

Re: Splunk Management Console - Error [subsearch] Rest Processor ... https://127.0.0.1:8089

rewritex — Wed, 12 Apr 2017 21:30:25 GMT

Yea, that seemed to do it ... Thank You.
I can't recall why it was added ...

Management Console (Master) -> Settings (on the green bar not the top black bar) -> General Setup
1) Edit Actions on the Master
2) Edit Server Roles
2) remove indexer role