https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427673#M174199 <P>so, you don't see a latest bundle when you did apply bundle-push from cluster-master..??<BR /> If not, you might have to make a dummy change to get a new checksum or do a rolling restart form cluster-master if that helps.</P> Mon, 10 Dec 2018 20:47:58 GMT prakash007 2018-12-10T20:47:58Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427668#M174194 <P>Hi,</P> <P>I had to rebuild an indexer, and it's now up and running, but it doesn't have the most recent updates that we have done from the cluster master, as the server was down when these were pushed out. Can I just do a push from the cluster master, or do I need to create a dummy change to force the cluster master to recognize that something has changed? </P> Mon, 10 Dec 2018 20:18:58 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427668#M174194 a212830 2018-12-10T20:18:58Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427669#M174195 <P>You can run cluster-bundle-status from cluster master to check if the new indexer added has the active_bundle/latest checksum, if not you can apply a cluster-bundle(I hope that should work)</P> Mon, 10 Dec 2018 20:29:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427669#M174195 prakash007 2018-12-10T20:29:46Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427670#M174196 <P>Hi,</P> <P>if the server was readded to the cluster it should have gotten the bundle. If not, as far as I know, you need a change to push a new one.</P> Mon, 10 Dec 2018 20:39:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427670#M174196 dkeck 2018-12-10T20:39:17Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427671#M174197 <P>Thanks. I ran the command, and it appears that the cluster master thinks that the bundle is there, but they aren't. I'm looking at that directory, and the updated files are missing. Can I just do a push again, or do I need to make an actual change?</P> Mon, 10 Dec 2018 20:40:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427671#M174197 a212830 2018-12-10T20:40:13Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427672#M174198 <P>you can try but it should tell you that all peers have the newest bundle</P> Mon, 10 Dec 2018 20:46:35 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427672#M174198 dkeck 2018-12-10T20:46:35Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427673#M174199 <P>so, you don't see a latest bundle when you did apply bundle-push from cluster-master..??<BR /> If not, you might have to make a dummy change to get a new checksum or do a rolling restart form cluster-master if that helps.</P> Mon, 10 Dec 2018 20:47:58 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427673#M174199 prakash007 2018-12-10T20:47:58Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427674#M174200 <P>Never mind. All set. My bad. </P> Mon, 10 Dec 2018 20:48:38 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427674#M174200 a212830 2018-12-10T20:48:38Z https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427675#M174201 <P>@a212830 : accept an answer for future readers.</P> Mon, 10 Dec 2018 20:52:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-push-out-an-indexer-bundle-after-rebuilding-a-server/m-p/427675#M174201 prakash007 2018-12-10T20:52:09Z