https://community.splunk.com/t5/Getting-Data-In/How-come-replication-isn-t-working-on-the-Index-cluster-after-a/m-p/430939#M75422 <P>It was found that Splunk OnPremise was installed on AWS and all of the ports were closed.</P> <P>Once port 8089 was opened replication resumed.</P> <P>The following Documentation Enhancement Request has been raised to be considered in a future release of Splunk. </P> <P><STRONG>SPL-163427</STRONG> Enhancement Request to check all ports are open in an Indexer Cluster/Search Head Cluster environment</P> <P>The default ports that Splunk uses are below.</P> <P>What are the ports that I need to open?</P> <P><A href="https://answers.splunk.com/answers/58888/what-are-the-ports-that-i-need-to-open.html">https://answers.splunk.com/answers/58888/what-are-the-ports-that-i-need-to-open.html</A></P> Fri, 07 Dec 2018 09:13:09 GMT christopherr_sp 2018-12-07T09:13:09Z https://community.splunk.com/t5/Getting-Data-In/How-come-replication-isn-t-working-on-the-Index-cluster-after-a/m-p/430938#M75421 <P>We had to shut down one of the machines and create a new one. The cluster replication between the new and old ones does not work after a reboot.</P> <P>The error message that was found in the splunkd.log files was:</P> <PRE><CODE>ERROR RetryableClientTransaction - transactionDone(): transactionId=0x7fda3f101000 rTxnId=0x7fda3c5fe4d0 success=N HTTP-statusCode=404 HTTP-statusDescription=Not Found retry=N no_retry_reason="transaction had fatal error" </CODE></PRE> Fri, 07 Dec 2018 09:11:13 GMT https://community.splunk.com/t5/Getting-Data-In/How-come-replication-isn-t-working-on-the-Index-cluster-after-a/m-p/430938#M75421 christopherr_sp 2018-12-07T09:11:13Z https://community.splunk.com/t5/Getting-Data-In/How-come-replication-isn-t-working-on-the-Index-cluster-after-a/m-p/430939#M75422 <P>It was found that Splunk OnPremise was installed on AWS and all of the ports were closed.</P> <P>Once port 8089 was opened replication resumed.</P> <P>The following Documentation Enhancement Request has been raised to be considered in a future release of Splunk. </P> <P><STRONG>SPL-163427</STRONG> Enhancement Request to check all ports are open in an Indexer Cluster/Search Head Cluster environment</P> <P>The default ports that Splunk uses are below.</P> <P>What are the ports that I need to open?</P> <P><A href="https://answers.splunk.com/answers/58888/what-are-the-ports-that-i-need-to-open.html">https://answers.splunk.com/answers/58888/what-are-the-ports-that-i-need-to-open.html</A></P> Fri, 07 Dec 2018 09:13:09 GMT https://community.splunk.com/t5/Getting-Data-In/How-come-replication-isn-t-working-on-the-Index-cluster-after-a/m-p/430939#M75422 christopherr_sp 2018-12-07T09:13:09Z