<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Reading error while waiting for peer XXX. Search results might be incomplete! [...] in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Reading-error-while-waiting-for-peer-XXX-Search-results-might-be/m-p/516537#M145185</link>
    <description>As the error message says, "search results might be incomplete", which would explain why the same search returns different results at different times.&lt;BR /&gt;Have you reviewed the search log and splunkd.log?</description>
    <pubDate>Thu, 27 Aug 2020 15:04:19 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2020-08-27T15:04:19Z</dc:date>
    <item>
      <title>Reading error while waiting for peer XXX. Search results might be incomplete! [...]</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Reading-error-while-waiting-for-peer-XXX-Search-results-might-be/m-p/516507#M145174</link>
      <description>&lt;P&gt;Hi everybody,&lt;/P&gt;&lt;P&gt;I've attached an error that occurs recently on the splunk infrastructure based on a SHC of 3 members and an indexer cluster of 2 nodes.&lt;/P&gt;&lt;P&gt;Sometimes, when I run a search on a SH I retrieve a result but if I repeat the same search - even after few hours - with the same conditions on the same SH I retrieve a different result!&lt;BR /&gt;Then, again, after a few hours, the same search gives me back the same result had in the first run.&lt;/P&gt;&lt;P&gt;The customer says that there aren't such network problem between the servers, even if the error message appears very clear.&lt;/P&gt;&lt;P&gt;Have anyone an idea about this?&lt;/P&gt;&lt;P&gt;Thanks in advance&lt;/P&gt;</description>
      <pubDate>Thu, 27 Aug 2020 13:08:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Reading-error-while-waiting-for-peer-XXX-Search-results-might-be/m-p/516507#M145174</guid>
      <dc:creator>lauraG85</dc:creator>
      <dc:date>2020-08-27T13:08:45Z</dc:date>
    </item>
    <item>
      <title>Re: Reading error while waiting for peer XXX. Search results might be incomplete! [...]</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Reading-error-while-waiting-for-peer-XXX-Search-results-might-be/m-p/516537#M145185</link>
      <description>As the error message says, "search results might be incomplete", which would explain why the same search returns different results at different times.&lt;BR /&gt;Have you reviewed the search log and splunkd.log?</description>
      <pubDate>Thu, 27 Aug 2020 15:04:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Reading-error-while-waiting-for-peer-XXX-Search-results-might-be/m-p/516537#M145185</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-08-27T15:04:19Z</dc:date>
    </item>
  </channel>
</rss>

