Deployment Architecture

Failed to contact the master. ERROR: from search head member

gmathiou4
Engager

Hello to everyone,
We had to change IP to our entire cluster, after the changes one SH member is not able to communicate the master.
This member was the captain before the changes, i tried to connect it to the new SH cluster but without success
The only error in the splunkd.log was 
ERROR KVStorageProvider - An error occurred during the last operation ('saveBatchData:upsert', domain: '0', code: '0'): No collection available
I execute the ./splunk clean kvstore and after that The main error in the logs now is:
INFO AuthenticationManagerLDAP - Could not find user=admin
The SH which is now the captain didn't have any issue and has the respectively configuration.
Do you have any suggestion to solve this issue?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...