Getting "Error while fetching apps baseline on target=http://:8089: Network-layer error: Connection reset by peer'" trying to deploy apps to a search head cluster

[jking81]

I'm having an issue running the command:

splunk apply shcluster-bundle -target http://<cluster_captain>:8089

This yields the error:

Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps baseline on target=http://<cluster_captain>:8089: Network-layer error: Connection reset by peer

After numerous attempts to change my pass4symkey under the shclustering stanza in my server.conf file, I'm still getting the same error. When we had originally set up the search head cluster, this worked properly, but I can't seem to find a way to debug this issue.

Adding the -debug flag gives the following:

(1ry) QUERYING: 'base_url:https://127.0.0.1:8089 auth_option:(null) relative_url:/services/apps/deploy command=POST'
In build_full_rest_url(): Composing URL from base=https://127.0.0.1:8089 + relative=/services/apps/deploy
In build_full_rest_url(): Composed URL=https://127.0.0.1:8089/services/apps/deploy
In make_simple_rest_call_online(): using_basic_auth=0
In make_simple_rest_call_online(): [Re-]Initialized HTTP request headers:
    <none>
In make_simple_rest_call_online(): HTTP request response_code=500
Online REST call to /services/apps/deploy returned -1
Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps baseline on target=http://<cluster_captain>:8089: Network-layer error: Connection reset by peer

(1ry) FAILED: 'HTTP/1.1 500 Error while deploying apps to first member: ConfDeploymentException: Error while fetching apps baseline on target=http://<cluster_captain>:8089: Network-layer error: Connection reset by peer'

As I can restart all of my search heads in the cluster and it's able to reform a cluster, I don't believe this is a pass4symkey issue. Any suggestions what would cause this?

[ridwanahmed]

did you ever figure out the issue?

I've confirmed https, pass4symmkey is correct, cleaned all my SHC instances, still this.

[493600]

I happened to get the same error. It was because i have used deployer instance instead of search head instance in the command ./splunk apply shcluster-bundle -target https://"Use search head instance here"

[sborys]

Use https instead of http . Splunk uses its own certificates although you server may not have SSL.

[kkrishnan_splun]

Thank you ! This helped me.