Deployment Architecture

Distributed Search Configuration

jthairu_splunk
Splunk Employee
Splunk Employee

I am trying to configure my search head to search my indexer and i keep receiving the following error:

Error while sending public key to search peer: Connect Timeout

One of the troubleshooting steps recommended was to make sure that splunkd is running with it is both on the SH and indexer.

Does anyone know what else I can try?

Thanks

Tags (1)
0 Karma

harsmarvania57
Ultra Champion

Are you able to connect Indexer management port from Search Head server?

Check using command telnet indexer 8089 if you are using linux

0 Karma

jthairu_splunk
Splunk Employee
Splunk Employee

when I run the telnet command I get the following:

telnet: indexer: Name or service not known
indexer: Unknown host

0 Karma

harsmarvania57
Ultra Champion

Ah, replace indexer with your indexer IP address so for example telnet 192.168.1.1 8089

0 Karma

harsmarvania57
Ultra Champion

Means there is communication problem between your Search Head and Indexer. Possible causes are firewall blocking, route problem etc.

0 Karma

jthairu_splunk
Splunk Employee
Splunk Employee

ok, I did that and the connection timed out

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...