Distributed Search Configuration

[jthairu_splunk]

I am trying to configure my search head to search my indexer and i keep receiving the following error:

Error while sending public key to search peer: Connect Timeout

One of the troubleshooting steps recommended was to make sure that splunkd is running with it is both on the SH and indexer.

Does anyone know what else I can try?

Thanks

[harsmarvania57]

Are you able to connect Indexer management port from Search Head server?

Check using command telnet indexer 8089 if you are using linux

[jthairu_splunk]

when I run the telnet command I get the following:

telnet: indexer: Name or service not known
indexer: Unknown host

[harsmarvania57]

Ah, replace indexer with your indexer IP address so for example telnet 192.168.1.1 8089

[harsmarvania57]

Means there is communication problem between your Search Head and Indexer. Possible causes are firewall blocking, route problem etc.

[jthairu_splunk]

ok, I did that and the connection timed out