topic SH Pool Error in Python Log in Getting Data In

SH Pool Error in Python Log

jnoga — Mon, 28 Sep 2020 18:05:29 GMT

I have a SH pool 6.1.3 and am seeing this error in the pyton_modular_input.log. I also have ES 3.1.1 installed. This error is affecting my ability to merge assets in to asset lookup list.

file=lookup_modinput.py:run:503 | status="exiting, not master host" msg=Not selecting this search head pool member as master host based on alphabetical ordering ({0}). To override, define master_host in inputs.conf.

Does anyone have a clue on how to resolve this issue or where to look?

Racking my brain on this one.
Thanks in advance.
Joe

Re: SH Pool Error in Python Log

martin_mueller — Sat, 08 Nov 2014 16:45:12 GMT

As per the inputs.conf.spec in SA-ThreatIntelligence you'll want to set that master_host setting in inputs.conf:

master_host = <string>
* [DEFAULT_STANZA_ONLY] Defines the master host if search head pooling is enabled.
* Only the master host will perform threat list downloads. If SHP is enabled this
* MUST be non-empty AND match the name of a server in the pool.

Re: SH Pool Error in Python Log

jnoga — Sat, 08 Nov 2014 17:06:44 GMT

Thanks Martin I will give this a shot!
Joe