Dashboards & Visualizations

We have 2 indexer peers with Search Factor=2 and Replication Factor=2. Till the time the Search Factor & Replication Factors are never met. Every time it will show the below errors in Master Node. Please help me to resolve this issue permanently

motkarnaresh
Explorer

Cannot fix search count as the bucket hasn't rolled yet.
AND
Missing enough suitable candidates to create searchable copy in order to meet replication policy. Missing={ default:1 }
AND
cannot fix up search factor as bucket is not serviceable

Tags (1)

lakshman239
SplunkTrust
SplunkTrust

There could be a few issues:

1) network delay between indexers/CMs to replicate the bucket across nodes.
2) the Cluster master taking time to update the status and show that in dashboard.
3) Restart the cluster master and allow time for it to catch up ... eventually the bucket status messages should be gone.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...