Deployment Architecture

Distributed Search Configuration

Splunk Employee
Splunk Employee

I am trying to configure my search head to search my indexer and i keep receiving the following error:

Error while sending public key to search peer: Connect Timeout

One of the troubleshooting steps recommended was to make sure that splunkd is running with it is both on the SH and indexer.

Does anyone know what else I can try?

Thanks

Tags (1)
0 Karma

SplunkTrust
SplunkTrust

Are you able to connect Indexer management port from Search Head server?

Check using command telnet indexer 8089 if you are using linux

0 Karma

Splunk Employee
Splunk Employee

when I run the telnet command I get the following:

telnet: indexer: Name or service not known
indexer: Unknown host

0 Karma

SplunkTrust
SplunkTrust

Ah, replace indexer with your indexer IP address so for example telnet 192.168.1.1 8089

0 Karma

SplunkTrust
SplunkTrust

Means there is communication problem between your Search Head and Indexer. Possible causes are firewall blocking, route problem etc.

0 Karma

Splunk Employee
Splunk Employee

ok, I did that and the connection timed out

0 Karma